[{"CVE":"CVE-2019-12402","severity":"important","public_date":"2019-08-27T00:00:00Z","advisories":[],"bugzilla":"1764640","bugzilla_description":"CVE-2019-12402 apache-commons-compress: Infinite loop in name encoding algorithm","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172->CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12402.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-11771","severity":"moderate","public_date":"2018-08-17T00:00:00Z","advisories":["RHSA-2020:0983"],"bugzilla":"1618573","bugzilla_description":"CVE-2018-11771 apache-commons-compress: ZipArchiveInputStream.read() fails to identify correct EOF allowing for DoS via crafted zip","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11771.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-1324","severity":"moderate","public_date":"2018-03-16T00:00:00Z","advisories":[],"bugzilla":"1557542","bugzilla_description":"CVE-2018-1324 apache-commons-compress:  Infinite loop via extra field parser in ZipFile and ZipArchiveInputStream classes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1324.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"}]