{
    "affected": [
        {
            "package": {
                "ecosystem": "Debian:8",
                "name": "grub2",
                "purl": "pkg:deb/debian/libjettison-java?distro=jessie&repository_url=http%3A%2F%2Fdeb.freexian.com%2Fextended-lts"
            },
            "ranges": {
                "events": [
                    {
                        "introduced": "0"
                    },
                    {
                        "fixed": "2.02~beta2-22+deb8u2"
                    }
                ],
                "type": "ECOSYSTEM"
            }
        },
        {
            "package": {
                "ecosystem": "Debian:9",
                "name": "libjettison-java",
                "purl": "pkg:deb/debian/libjettison-java?distro=stretch&repository_url=http%3A%2F%2Fdeb.freexian.com%2Fextended-lts"
            },
            "ranges": {
                "events": [
                    {
                        "introduced": "0"
                    },
                    {
                        "fixed": "1.5.3-1~deb9u1"
                    }
                ],
                "type": "ECOSYSTEM"
            }
        }
    ],
    "database_specific": {
        "type": "security update"
    },
    "id": "ELA-762-1",
    "modified": "2022-12-31T00:00:00Z",
    "references": [
        {
            "type": "ADVISORY",
            "url": "https://deb.freexian.com/extended-lts/tracker/ELA-762-1"
        },
        {
            "type": "ADVISORY",
            "url": "https://deb.freexian.com/extended-lts/tracker/CVE-2022-40150"
        },
        {
            "type": "ADVISORY",
            "url": "https://deb.freexian.com/extended-lts/tracker/CVE-2022-45685"
        },
        {
            "type": "ADVISORY",
            "url": "https://deb.freexian.com/extended-lts/tracker/CVE-2022-45693"
        }
    ],
    "related": [
        "CVE-2022-40150",
        "CVE-2022-45685",
        "CVE-2022-45693"
    ]
}