[{"CVE":"CVE-2019-6293","severity":"low","public_date":"2019-01-09T00:00:00Z","advisories":[],"bugzilla":"1667864","bugzilla_description":"CVE-2019-6293 flex: Recursive calls in the function mark_beginning_as_normal resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6293.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-6354","severity":"moderate","public_date":"2016-07-18T00:00:00Z","advisories":[],"bugzilla":"1360743","bugzilla_description":"CVE-2016-6354 flex: buffer overflow in generated code (yy_get_next_buffer)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6354.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"}]