{ "request": { "method": "GET", "url": "https://cvedb.shodan.io/cve/CVE-2024-3094" }, "response": { "status": 200, "headers": { "Content-Type": "application/json" }, "body": { "cve_id": "CVE-2024-3094", "summary": "Malicious code was discovered in the upstream xz/liblzma tarballs allowing for unauthorized SSH access.", "cvss": 10.0, "cvss_version": "3.1", "cvss_v2": null, "cvss_v3": 10.0, "epss": 0.94, "ranking_epss": 0.999, "kev": true, "propose_action": "Patch immediately; verify package integrity.", "ransomware_campaign": null, "references": [ "https://nvd.nist.gov/vuln/detail/CVE-2024-3094", "https://www.cisa.gov/news-events/alerts/2024/03/29/reported-supply-chain-compromise-affecting-xz-utils-data-compression-library-cve-2024-3094" ], "published_time": "2024-03-29T17:15:21Z", "cpes": [ "cpe:2.3:a:tukaani:xz:5.6.0", "cpe:2.3:a:tukaani:xz:5.6.1" ] } } }