{ "document": { "aggregate_severity": { "text": "Low" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/ubuntu18.04els/vex/2025/cve-2025-64503-els_os-ubuntu18_04els.json" } ], "tracking": { "current_release_date": "2026-08-21T23:35:02Z", "generator": { "date": "2026-08-21T23:35:02Z", "engine": { "name": "pyCSAF" } }, "id": "CVE-2025-64503-ELS_OS-UBUNTU18.04ELS", "initial_release_date": "2025-11-12T22:15:00Z", "revision_history": [ { "date": "2025-11-12T22:15:00Z", "number": "1", "summary": "Initial version" }, { "date": "2026-08-21T23:35:02Z", "number": "2", "summary": "Official Publication" } ], "status": "final", "version": "2" }, "title": "Security update on CVE-2025-64503" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Ubuntu 18.04", "product": { "name": "Ubuntu 18.04", "product_id": "Ubuntu-18", "product_identification_helper": { "cpe": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*" } } } ], "category": "product_family", "name": "Ubuntu" }, { "branches": [ { "category": "product_version", "name": "libcupsfilters-dev-0:1.20.2-0ubuntu3.3.amd64", "product": { "name": "libcupsfilters-dev-0:1.20.2-0ubuntu3.3.amd64", "product_id": "libcupsfilters-dev-0:1.20.2-0ubuntu3.3.amd64", "product_identification_helper": { "purl": "pkg:deb/ubuntu/libcupsfilters-dev@1.20.2-0ubuntu3.3?arch=amd64" } } }, { "category": "product_version", "name": "cups-filters-0:1.20.2-0ubuntu3.3.amd64", "product": { "name": "cups-filters-0:1.20.2-0ubuntu3.3.amd64", "product_id": "cups-filters-0:1.20.2-0ubuntu3.3.amd64", "product_identification_helper": { "purl": "pkg:deb/ubuntu/cups-filters@1.20.2-0ubuntu3.3?arch=amd64" } } }, { "category": "product_version", "name": "libcupsfilters1-0:1.20.2-0ubuntu3.3.amd64", "product": { "name": "libcupsfilters1-0:1.20.2-0ubuntu3.3.amd64", "product_id": "libcupsfilters1-0:1.20.2-0ubuntu3.3.amd64", "product_identification_helper": { "purl": "pkg:deb/ubuntu/libcupsfilters1@1.20.2-0ubuntu3.3?arch=amd64" } } }, { "category": "product_version", "name": "cups-filters-core-drivers-0:1.20.2-0ubuntu3.3.amd64", "product": { "name": "cups-filters-core-drivers-0:1.20.2-0ubuntu3.3.amd64", "product_id": "cups-filters-core-drivers-0:1.20.2-0ubuntu3.3.amd64", "product_identification_helper": { "purl": "pkg:deb/ubuntu/cups-filters-core-drivers@1.20.2-0ubuntu3.3?arch=amd64" } } }, { "category": "product_version", "name": "libfontembed-dev-0:1.20.2-0ubuntu3.3.amd64", "product": { "name": "libfontembed-dev-0:1.20.2-0ubuntu3.3.amd64", "product_id": "libfontembed-dev-0:1.20.2-0ubuntu3.3.amd64", "product_identification_helper": { "purl": "pkg:deb/ubuntu/libfontembed-dev@1.20.2-0ubuntu3.3?arch=amd64" } } }, { "category": "product_version", "name": "libfontembed1-0:1.20.2-0ubuntu3.3.amd64", "product": { "name": "libfontembed1-0:1.20.2-0ubuntu3.3.amd64", "product_id": "libfontembed1-0:1.20.2-0ubuntu3.3.amd64", "product_identification_helper": { "purl": "pkg:deb/ubuntu/libfontembed1@1.20.2-0ubuntu3.3?arch=amd64" } } }, { "category": "product_version", "name": "cups-browsed-0:1.20.2-0ubuntu3.3.amd64", "product": { "name": "cups-browsed-0:1.20.2-0ubuntu3.3.amd64", "product_id": "cups-browsed-0:1.20.2-0ubuntu3.3.amd64", "product_identification_helper": { "purl": "pkg:deb/ubuntu/cups-browsed@1.20.2-0ubuntu3.3?arch=amd64" } } } ], "category": "architecture", "name": "amd64" } ], "category": "vendor", "name": "Canonical Ltd." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "libcupsfilters-dev-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "product": { "name": "libcupsfilters-dev-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "product_id": "libcupsfilters-dev-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/libcupsfilters-dev@1.20.2-0ubuntu3.3%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "cups-filters-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "product": { "name": "cups-filters-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "product_id": "cups-filters-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/cups-filters@1.20.2-0ubuntu3.3%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libcupsfilters1-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "product": { "name": "libcupsfilters1-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "product_id": "libcupsfilters1-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/libcupsfilters1@1.20.2-0ubuntu3.3%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "cups-filters-core-drivers-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "product": { "name": "cups-filters-core-drivers-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "product_id": "cups-filters-core-drivers-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/cups-filters-core-drivers@1.20.2-0ubuntu3.3%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libfontembed-dev-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "product": { "name": "libfontembed-dev-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "product_id": "libfontembed-dev-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/libfontembed-dev@1.20.2-0ubuntu3.3%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libfontembed1-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "product": { "name": "libfontembed1-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "product_id": "libfontembed1-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/libfontembed1@1.20.2-0ubuntu3.3%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "cups-browsed-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "product": { "name": "cups-browsed-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "product_id": "cups-browsed-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/cups-browsed@1.20.2-0ubuntu3.3%2Btuxcare.els1?arch=amd64" } } } ], "category": "architecture", "name": "amd64" } ], "category": "vendor", "name": "CloudLinux" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libcupsfilters-dev-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:libcupsfilters-dev-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64" }, "product_reference": "libcupsfilters-dev-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "libcupsfilters-dev-0:1.20.2-0ubuntu3.3.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:libcupsfilters-dev-0:1.20.2-0ubuntu3.3.amd64" }, "product_reference": "libcupsfilters-dev-0:1.20.2-0ubuntu3.3.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "cups-filters-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:cups-filters-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64" }, "product_reference": "cups-filters-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "cups-filters-0:1.20.2-0ubuntu3.3.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:cups-filters-0:1.20.2-0ubuntu3.3.amd64" }, "product_reference": "cups-filters-0:1.20.2-0ubuntu3.3.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "libcupsfilters1-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:libcupsfilters1-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64" }, "product_reference": "libcupsfilters1-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "libcupsfilters1-0:1.20.2-0ubuntu3.3.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:libcupsfilters1-0:1.20.2-0ubuntu3.3.amd64" }, "product_reference": "libcupsfilters1-0:1.20.2-0ubuntu3.3.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "cups-filters-core-drivers-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:cups-filters-core-drivers-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64" }, "product_reference": "cups-filters-core-drivers-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "cups-filters-core-drivers-0:1.20.2-0ubuntu3.3.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:cups-filters-core-drivers-0:1.20.2-0ubuntu3.3.amd64" }, "product_reference": "cups-filters-core-drivers-0:1.20.2-0ubuntu3.3.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "libfontembed-dev-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:libfontembed-dev-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64" }, "product_reference": "libfontembed-dev-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "libfontembed-dev-0:1.20.2-0ubuntu3.3.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:libfontembed-dev-0:1.20.2-0ubuntu3.3.amd64" }, "product_reference": "libfontembed-dev-0:1.20.2-0ubuntu3.3.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "libfontembed1-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:libfontembed1-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64" }, "product_reference": "libfontembed1-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "libfontembed1-0:1.20.2-0ubuntu3.3.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:libfontembed1-0:1.20.2-0ubuntu3.3.amd64" }, "product_reference": "libfontembed1-0:1.20.2-0ubuntu3.3.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "cups-browsed-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:cups-browsed-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64" }, "product_reference": "cups-browsed-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "cups-browsed-0:1.20.2-0ubuntu3.3.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:cups-browsed-0:1.20.2-0ubuntu3.3.amd64" }, "product_reference": "cups-browsed-0:1.20.2-0ubuntu3.3.amd64", "relates_to_product_reference": "Ubuntu-18" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-64503", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In cups-filters prior to 1.28.18, by crafting a PDF file with a large `MediaBox` value, an attacker can cause CUPS-Filter 1.x’s `pdftoraster` tool to write beyond the bounds of an array. First, a PDF with a large `MediaBox` width value causes `header.cupsWidth` to become large. Next, the calculation of `bytesPerLine = (header.cupsBitsPerPixel * header.cupsWidth + 7) / 8` overflows, resulting in a small value. Then, `lineBuf` is allocated with the small `bytesPerLine` size. Finally, `convertLineChunked` calls `writePixel8`, which attempts to write to `lineBuf` outside of its buffer size (out of bounds write). In libcupsfilters, the maintainers found the same `bytesPerLine` multiplication without overflow check, but the provided test case does not cause an overflow there, because the values are different. Commit 50d94ca0f2fa6177613c97c59791bde568631865 contains a patch, which is incorporated into cups-filters version 1.28.18.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "known_affected": [ "Ubuntu-18:cups-browsed-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "Ubuntu-18:cups-browsed-0:1.20.2-0ubuntu3.3.amd64", "Ubuntu-18:cups-filters-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "Ubuntu-18:cups-filters-0:1.20.2-0ubuntu3.3.amd64", "Ubuntu-18:cups-filters-core-drivers-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "Ubuntu-18:cups-filters-core-drivers-0:1.20.2-0ubuntu3.3.amd64", "Ubuntu-18:libcupsfilters-dev-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "Ubuntu-18:libcupsfilters-dev-0:1.20.2-0ubuntu3.3.amd64", "Ubuntu-18:libcupsfilters1-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "Ubuntu-18:libcupsfilters1-0:1.20.2-0ubuntu3.3.amd64", "Ubuntu-18:libfontembed-dev-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "Ubuntu-18:libfontembed-dev-0:1.20.2-0ubuntu3.3.amd64", "Ubuntu-18:libfontembed1-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "Ubuntu-18:libfontembed1-0:1.20.2-0ubuntu3.3.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-64503" }, { "category": "external", "summary": "https://github.com/OpenPrinting/cups-filters/blob/aea8d0db017e495b0204433ebdb0e86b4871094c/filter/pdftoraster.cxx#L1620", "url": "https://github.com/OpenPrinting/cups-filters/blob/aea8d0db017e495b0204433ebdb0e86b4871094c/filter/pdftoraster.cxx#L1620" }, { "category": "external", "summary": "https://github.com/OpenPrinting/cups-filters/blob/aea8d0db017e495b0204433ebdb0e86b4871094c/filter/pdftoraster.cxx#L1880", "url": "https://github.com/OpenPrinting/cups-filters/blob/aea8d0db017e495b0204433ebdb0e86b4871094c/filter/pdftoraster.cxx#L1880" }, { "category": "external", "summary": "https://github.com/OpenPrinting/cups-filters/commit/50d94ca0f2fa6177613c97c59791bde568631865", "url": "https://github.com/OpenPrinting/cups-filters/commit/50d94ca0f2fa6177613c97c59791bde568631865" }, { "category": "external", "summary": "https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-893j-2wr2-wrh9", "url": "https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-893j-2wr2-wrh9" }, { "category": "external", "summary": "https://github.com/OpenPrinting/libcupsfilters/blob/1dd86d835b27ed149b66aee1a4853d1db8a1f44c/cupsfilters/pdftoraster.cxx#L1790", "url": "https://github.com/OpenPrinting/libcupsfilters/blob/1dd86d835b27ed149b66aee1a4853d1db8a1f44c/cupsfilters/pdftoraster.cxx#L1790" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2025/11/12/2", "url": "http://www.openwall.com/lists/oss-security/2025/11/12/2" } ], "release_date": "2025-11-12T22:15:00Z", "remediations": [ { "category": "no_fix_planned", "date": "2026-08-18T14:37:34.015723Z", "details": "Risk is limited to hosts that actually process print jobs with CUPS, since exploitation requires a user to submit/print a specially crafted PDF that exercises the pdftoraster filter; there is no remote, unauthenticated trigger. The effect is primarily a filter crash (availability-only) with no confidentiality or integrity impact, reflected in the Low (3.3) CVSS score. Systems not running CUPS or not handling untrusted PDFs are unaffected, so this can be safely deprioritized in managed server/VM environments.", "product_ids": [ "Ubuntu-18:cups-browsed-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "Ubuntu-18:cups-browsed-0:1.20.2-0ubuntu3.3.amd64", "Ubuntu-18:cups-filters-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "Ubuntu-18:cups-filters-0:1.20.2-0ubuntu3.3.amd64", "Ubuntu-18:cups-filters-core-drivers-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "Ubuntu-18:cups-filters-core-drivers-0:1.20.2-0ubuntu3.3.amd64", "Ubuntu-18:libcupsfilters-dev-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "Ubuntu-18:libcupsfilters-dev-0:1.20.2-0ubuntu3.3.amd64", "Ubuntu-18:libcupsfilters1-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "Ubuntu-18:libcupsfilters1-0:1.20.2-0ubuntu3.3.amd64", "Ubuntu-18:libfontembed-dev-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "Ubuntu-18:libfontembed-dev-0:1.20.2-0ubuntu3.3.amd64", "Ubuntu-18:libfontembed1-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "Ubuntu-18:libfontembed1-0:1.20.2-0ubuntu3.3.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "Ubuntu-18:cups-browsed-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "Ubuntu-18:cups-browsed-0:1.20.2-0ubuntu3.3.amd64", "Ubuntu-18:cups-filters-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "Ubuntu-18:cups-filters-0:1.20.2-0ubuntu3.3.amd64", "Ubuntu-18:cups-filters-core-drivers-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "Ubuntu-18:cups-filters-core-drivers-0:1.20.2-0ubuntu3.3.amd64", "Ubuntu-18:libcupsfilters-dev-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "Ubuntu-18:libcupsfilters-dev-0:1.20.2-0ubuntu3.3.amd64", "Ubuntu-18:libcupsfilters1-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "Ubuntu-18:libcupsfilters1-0:1.20.2-0ubuntu3.3.amd64", "Ubuntu-18:libfontembed-dev-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "Ubuntu-18:libfontembed-dev-0:1.20.2-0ubuntu3.3.amd64", "Ubuntu-18:libfontembed1-0:1.20.2-0ubuntu3.3+tuxcare.els1.amd64", "Ubuntu-18:libfontembed1-0:1.20.2-0ubuntu3.3.amd64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] } ] }