def METHOD_NAME(self, pkg_name: str, records: Mapping[str, Any]) -> Iterable[AdvisoryData]:
    for cve_id, record in records.items():
        affected_versions = []
        fixed_versions = []
        if not cve_id.startswith("CVE"):
            logger.error(f"Invalid CVE ID: {cve_id} in {record} in package {pkg_name}")
            continue
        # vulnerabilities starting with something else may not be public yet
        # see for instance https://web.archive.org/web/20201215213725/https://security-tracker.debian.org/tracker/TEMP-0000000-A2EB44
        # TODO: this would need to be revisited though to ensure we are not missing out on anything
        # https://github.com/nexB/vulnerablecode/issues/730
        releases = record["releases"].items()
        for release_name, release_record in releases:
            version = get_item(release_record, "repositories", release_name)
            if not version:
                logger.error(
                    f"Version not found for {release_name} in {record} in package {pkg_name}"
                )
                continue
            purl = PackageURL(
                name=pkg_name,
                type="deb",
                namespace="debian",
                qualifiers={"distro": release_name},
            )
            if release_record.get("status", "") == "resolved":
                fixed_versions.append(version)
            else:
                affected_versions.append(version)
            if "fixed_version" in release_record:
                fixed_versions.append(release_record["fixed_version"])
        references = []
        debianbug = record.get("debianbug")
        if debianbug:
            bug_url = f"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug={debianbug}"
            references.append(Reference(url=bug_url, reference_id=str(debianbug)))
        affected_versions = dedupe(affected_versions)
        fixed_versions = dedupe(fixed_versions)
        if affected_versions:
            affected_version_range = DebianVersionRange.from_versions(affected_versions)
        else:
            affected_version_range = None
        affected_packages = []
        for fixed_version in fixed_versions:
            affected_packages.append(
                AffectedPackage(
                    package=purl,
                    affected_version_range=affected_version_range,
                    fixed_version=DebianVersion(fixed_version),
                )
            )
        yield AdvisoryData(
            aliases=[cve_id],
            summary=record.get("description", ""),
            affected_packages=affected_packages,
            references=references,
        )