{
 "matches": [
  {
   "vulnerability": {
    "id": "CVE-1999-0001",
    "dataSource": "",
    "severity": "Low",
    "urls": [],
    "description": "1999-01 description",
    "cvss": [
     {
      "version": "3.0",
      "vector": "another vector",
      "metrics": {
       "baseScore": 4
      },
      "vendorMetadata": {}
     }
    ],
    "fix": {
     "versions": [
      "the-next-version"
     ],
     "state": ""
    },
    "advisories": []
   },
   "relatedVulnerabilities": [],
   "matchDetails": [
    {
     "type": "exact-direct-match",
     "matcher": "dpkg-matcher",
     "searchedBy": {
      "distro": {
       "type": "ubuntu",
       "version": "20.04"
      }
     },
     "found": {
      "constraint": ">= 20"
     }
    }
   ],
   "artifact": {
    "name": "package-1",
    "version": "1.0.1",
    "type": "deb",
    "locations": [
     {
      "path": "/some/path/pkg1"
     }
    ],
    "language": "",
    "licenses": [],
    "cpes": [],
    "purl": "",
    "upstreams": []
   }
  },
  {
   "vulnerability": {
    "id": "CVE-1999-0002",
    "dataSource": "",
    "severity": "Critical",
    "urls": [],
    "description": "1999-02 description",
    "cvss": [
     {
      "version": "2.0",
      "vector": "vector",
      "metrics": {
       "baseScore": 1,
       "exploitabilityScore": 2,
       "impactScore": 3
      },
      "vendorMetadata": {
       "BaseSeverity": "Low",
       "Status": "verified"
      }
     }
    ],
    "fix": {
     "versions": [],
     "state": ""
    },
    "advisories": []
   },
   "relatedVulnerabilities": [],
   "matchDetails": [
    {
     "type": "exact-indirect-match",
     "matcher": "dpkg-matcher",
     "searchedBy": {
      "cpe": "somecpe"
     },
     "found": {
      "constraint": "somecpe"
     }
    }
   ],
   "artifact": {
    "name": "package-1",
    "version": "1.0.1",
    "type": "deb",
    "locations": [
     {
      "path": "/some/path/pkg1"
     }
    ],
    "language": "",
    "licenses": [],
    "cpes": [],
    "purl": "",
    "upstreams": []
   }
  },
  {
   "vulnerability": {
    "id": "CVE-1999-0003",
    "dataSource": "",
    "severity": "High",
    "urls": [],
    "description": "1999-03 description",
    "cvss": [],
    "fix": {
     "versions": [
      "the-other-next-version"
     ],
     "state": ""
    },
    "advisories": []
   },
   "relatedVulnerabilities": [],
   "matchDetails": [
    {
     "type": "exact-indirect-match",
     "matcher": "dpkg-matcher",
     "searchedBy": {
      "language": "java"
     },
     "found": {
      "constraint": "< 2.0.0"
     }
    }
   ],
   "artifact": {
    "name": "package-1",
    "version": "1.0.1",
    "type": "deb",
    "locations": [
     {
      "path": "/some/path/pkg1"
     }
    ],
    "language": "",
    "licenses": [],
    "cpes": [],
    "purl": "",
    "upstreams": []
   }
  }
 ],
 "source": {
  "type": "directory",
  "target": "/some/path"
 },
 "distro": {
  "name": "centos",
  "version": "8.0",
  "idLike": [
   "rhel"
  ]
 },
 "descriptor": {
  "name": "grype",
  "version": "[not provided]"
 }
}
