HTTP/2 200 content-type: text/xml;charset=UTF-8 access-control-allow-origin: * cache-control: public, max-age=86400, s-maxage=86400 content-encoding: gzip content-security-policy: default-src 'none'; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data:; font-src 'self'; script-src 'self' 'unsafe-eval' https://*.first.org https://unpkg.com; form-action 'self'; media-src 'self' *.first.org; connect-src 'self' https://api.first.org; object-src 'none'; frame-src https:; frame-ancestors 'self' https://*.first.org; base-uri 'self' content-transfer-encoding: binary etag: "7b2e31b788549bd24fc0ea8e5db6ec19;gzip" expires: Fri, 25 Jul 2025 09:00:23 GMT last-modified: Fri, 07 Jun 2024 06:38:06 GMT referrer-policy: same-origin server: nginx x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block accept-ranges: bytes age: 0 date: Tue, 07 Oct 2025 06:20:01 GMT via: 1.1 varnish x-served-by: cache-bom-vanm7210027-BOM x-cache: HIT x-cache-hits: 0 x-timer: S1759818000.485480,VS0,VE1113 vary: Accept-Encoding strict-transport-security: max-age=31557600 alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 content-length: 2301 Value restriction to single decimal values from 0.0 to 10.0, as used in CVSS scores