{   'affected': [],
    'affected_checksum': None,
    'affected_fuzzy': [   '0.7.0-incubating',
                          '0.8.0',
                          '0.9.0',
                          '1.0',
                          '1.1',
                          '2.0',
                          '2.1',
                          '2.2',
                          '2.3',
                          '2.4'],
    'affected_packages': [   {   'database_specific': None,
                                 'ecosystem_specific': None,
                                 'package': {   'ecosystem': 'Maven',
                                                'name': 'org.apache.any23:apache-any23',
                                                'purl': 'pkg:maven/org.apache.any23/apache-any23'},
                                 'ranges': [   {   'database_specific': None,
                                                   'events': [   {   'type': 'introduced',
                                                                     'value': '0'},
                                                                 {   'type': 'fixed',
                                                                     'value': '2.5'}],
                                                   'repo_url': '',
                                                   'type': 'ECOSYSTEM'}],
                                 'severities': [],
                                 'versions': [   '0.7.0-incubating',
                                                 '0.8.0',
                                                 '0.9.0',
                                                 '1.0',
                                                 '1.1',
                                                 '2.0',
                                                 '2.1',
                                                 '2.2',
                                                 '2.3',
                                                 '2.4']}],
    'aliases': ['CVE-2021-38555'],
    'credits': [],
    'database_specific': {   'cwe_ids': ['CWE-611'],
                             'github_reviewed': True,
                             'github_reviewed_at': '2021-09-13T19:31:01Z',
                             'nvd_published_at': '2021-09-11T11:15:00Z',
                             'severity': 'CRITICAL'},
    'db_id': 'GHSA-838r-hvwh-24h8',
    'details': 'An XML external entity (XXE) injection vulnerability was '
               'discovered in the Any23 StreamUtils.java file and is known to '
               'affect Any23 versions < 2.5. XML external entity injection '
               '(also known as XXE) is a web security vulnerability that '
               "allows an attacker to interfere with an application's "
               'processing of XML data. It often allows an attacker to view '
               'files on the application server filesystem, and to interact '
               'with any back-end or external systems that the application '
               'itself can access.',
    'ecosystem': ['Maven'],
    'fixed': '',
    'has_affected': True,
    'import_last_modified': DatetimeWithNanoseconds(2021, 9, 24, 13, 10, 5, tzinfo=datetime.timezone.utc),
    'is_fixed': True,
    'issue_id': None,
    'last_modified': DatetimeWithNanoseconds(3000, 1, 1, 0, 0, tzinfo=datetime.timezone.utc),
    'project': ['org.apache.any23:apache-any23'],
    'public': True,
    'purl': ['pkg:maven/org.apache.any23/apache-any23'],
    'reference_url_types': {   'https://github.com/apache/any23': 'PACKAGE',
                               'https://lists.apache.org/thread.html/r589d1a9f94dbeee7a0f5dbe8513a0e300dfe669bd964ba2fbfe28e07%40%3Cannounce.apache.org%3E': 'WEB',
                               'https://nvd.nist.gov/vuln/detail/CVE-2021-38555': 'ADVISORY'},
    'regressed': '',
    'related': [],
    'search_indices': [   '2021',
                          '2021-38555',
                          '24h8',
                          '38555',
                          '838r',
                          '838r-hvwh',
                          '838r-hvwh-24h8',
                          'any23',
                          'apache',
                          'cve',
                          'cve-2021',
                          'cve-2021-38555',
                          'ghsa',
                          'ghsa-838r',
                          'ghsa-838r-hvwh',
                          'ghsa-838r-hvwh-24h8',
                          'hvwh',
                          'hvwh-24h8',
                          'maven',
                          'org',
                          'org.apache.any23:apache-any23'],
    'search_tags': ['ghsa-838r-hvwh-24h8', 'org.apache.any23:apache-any23'],
    'semver_fixed_indexes': [],
    'severities': [   {   'score': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N',
                          'type': 'CVSS_V3'}],
    'source': 'source',
    'source_id': 'source:GHSA-838r-hvwh-24h8.json',
    'source_of_truth': 2,
    'status': 1,
    'summary': 'XML Injection in Any23',
    'timestamp': DatetimeWithNanoseconds(2021, 9, 13, 20, 6, 31, tzinfo=datetime.timezone.utc),
    'upstream_raw': [],
    'withdrawn': None}