[
  {
    "CVE": "CVE-2022-24272",
    "severity": "moderate",
    "public_date": "2022-04-21T00:00:00Z",
    "advisories": [],
    "bugzilla": 2077736,
    "bugzilla_description": "CVE-2022-24272 mongodb: authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database",
    "cvss_score": null,
    "cvss_scoring_vector": null,
    "CWE": null,
    "affected_packages": [],
    "resource_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-24272.json",
    "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N",
    "cvss3_score": 6.3
  },
  {
    "CVE": "CVE-2022-21426",
    "severity": "moderate",
    "public_date": "2022-04-19T20:00:00Z",
    "advisories": [
      "RHSA-2022:1439",
      "RHSA-2022:1437",
      "RHSA-2022:1436"
    ],
    "bugzilla": 2075788,
    "bugzilla_description": "CVE-2022-21426 OpenJDK: Unbounded memory allocation when compiling crafted XPath expressions (JAXP, 8270504)",
    "cvss_score": null,
    "cvss_scoring_vector": null,
    "CWE": "CWE-400",
    "affected_packages": [
      "java-11-openjdk-1:11.0.15.0.9-2.el8_1",
      "java-11-openjdk-1:11.0.15.0.9-2.el8_2",
      "java-11-openjdk-1:11.0.15.0.9-2.el7_9",
      "Windows",
      "java-11-openjdk-1:11.0.15.0.9-2.el8_5",
      "java-1.8.0-openjdk-1:1.8.0.332.b09-1.el8_5",
      "java-11-openjdk-1:11.0.15.0.9-2.el8_4",
      "java-1.8.0-openjdk-1:1.8.0.332.b09-1.el7_9",
      "java-1.8.0-openjdk-1:1.8.0.332.b09-1.el8_1",
      "java-1.8.0-openjdk-1:1.8.0.332.b09-1.el8_2",
      "Linux",
      "java-17-openjdk-1:17.0.3.0.6-2.el8_5",
      "java-1.8.0-openjdk-1:1.8.0.332.b09-1.el8_4"
    ],
    "resource_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-21426.json",
    "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
    "cvss3_score": 5.3
  }
]