Lookup for vulnerable packages by Package URL.

Purlpkg:apk/alpine/gitlab-runner@15.10.0-r0?arch=aarch64&distroversion=v3.19&reponame=community
Typeapk
Namespacealpine
Namegitlab-runner
Version15.10.0-r0
Qualifiers
arch aarch64
distroversion v3.19
reponame community
Subpath
Is_vulnerablefalse
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-wqqa-tzs4-kugj
vulnerability_id VCID-wqqa-tzs4-kugj
summary
Authorization Bypass Through User-Controlled Key in go-restful
Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-1996.json
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-1996.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-1996
reference_id
reference_type
scores
0
value 0.00963
scoring_system epss
scoring_elements 0.76602
published_at 2026-04-24T12:55:00Z
1
value 0.00963
scoring_system epss
scoring_elements 0.76478
published_at 2026-04-01T12:55:00Z
2
value 0.00963
scoring_system epss
scoring_elements 0.76543
published_at 2026-04-12T12:55:00Z
3
value 0.00963
scoring_system epss
scoring_elements 0.76563
published_at 2026-04-11T12:55:00Z
4
value 0.00963
scoring_system epss
scoring_elements 0.76482
published_at 2026-04-02T12:55:00Z
5
value 0.00963
scoring_system epss
scoring_elements 0.76511
published_at 2026-04-04T12:55:00Z
6
value 0.00963
scoring_system epss
scoring_elements 0.76494
published_at 2026-04-07T12:55:00Z
7
value 0.00963
scoring_system epss
scoring_elements 0.76526
published_at 2026-04-08T12:55:00Z
8
value 0.00963
scoring_system epss
scoring_elements 0.76537
published_at 2026-04-13T12:55:00Z
9
value 0.00963
scoring_system epss
scoring_elements 0.76571
published_at 2026-04-21T12:55:00Z
10
value 0.00963
scoring_system epss
scoring_elements 0.76582
published_at 2026-04-18T12:55:00Z
11
value 0.00963
scoring_system epss
scoring_elements 0.76578
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-1996
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1996
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1996
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/emicklei/go-restful
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/emicklei/go-restful
5
reference_url https://github.com/emicklei/go-restful/commit/926662532deb450272956c7bc573978464aae74e
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/emicklei/go-restful/commit/926662532deb450272956c7bc573978464aae74e
6
reference_url https://github.com/emicklei/go-restful/commit/f292efff46ae17e9d104f865a60a39a2ae9402f1
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/emicklei/go-restful/commit/f292efff46ae17e9d104f865a60a39a2ae9402f1
7
reference_url https://github.com/emicklei/go-restful/commit/fd3c327a379ce08c68ef18765bdc925f5d9bad10
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/emicklei/go-restful/commit/fd3c327a379ce08c68ef18765bdc925f5d9bad10
8
reference_url https://github.com/emicklei/go-restful/issues/489
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/emicklei/go-restful/issues/489
9
reference_url https://huntr.dev/bounties/be837427-415c-4d8c-808b-62ce20aa84f1
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/be837427-415c-4d8c-808b-62ce20aa84f1
10
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/575BLJ3Y2EQBRNTFR2OSQQ6L2W6UCST3
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/575BLJ3Y2EQBRNTFR2OSQQ6L2W6UCST3
11
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OBDD3Q23RCGAGHIXUCWBU6N3S4RNAKXB
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OBDD3Q23RCGAGHIXUCWBU6N3S4RNAKXB
12
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6
13
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SO5QC2JFW2PXBWAE27OYYYL5SPFUBHTY
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SO5QC2JFW2PXBWAE27OYYYL5SPFUBHTY
14
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W56PP46JVZEKCANBKXFKRVSBBRRMCY6V
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W56PP46JVZEKCANBKXFKRVSBBRRMCY6V
15
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z55VUVGO7E5PJFXIOVAY373NZRHBNCI5
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z55VUVGO7E5PJFXIOVAY373NZRHBNCI5
16
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZGQKWD6SE75PFBPFVSZYAKAVXKBZXKWS
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZGQKWD6SE75PFBPFVSZYAKAVXKBZXKWS
17
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR
18
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-1996
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-1996
19
reference_url https://pkg.go.dev/vuln/GO-2022-0619
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://pkg.go.dev/vuln/GO-2022-0619
20
reference_url https://security.netapp.com/advisory/ntap-20220923-0005
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20220923-0005
21
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1012763
reference_id 1012763
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1012763
22
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2094982
reference_id 2094982
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2094982
23
reference_url https://access.redhat.com/errata/RHSA-2022:6040
reference_id RHSA-2022:6040
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6040
24
reference_url https://access.redhat.com/errata/RHSA-2022:6042
reference_id RHSA-2022:6042
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6042
25
reference_url https://access.redhat.com/errata/RHSA-2022:6351
reference_id RHSA-2022:6351
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6351
26
reference_url https://access.redhat.com/errata/RHSA-2022:8609
reference_id RHSA-2022:8609
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8609
27
reference_url https://access.redhat.com/errata/RHSA-2023:0814
reference_id RHSA-2023:0814
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0814
28
reference_url https://access.redhat.com/errata/RHSA-2023:3229
reference_id RHSA-2023:3229
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3229
29
reference_url https://access.redhat.com/errata/RHSA-2023:3557
reference_id RHSA-2023:3557
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3557
fixed_packages
0
url pkg:apk/alpine/gitlab-runner@15.10.0-r0?arch=aarch64&distroversion=v3.19&reponame=community
purl pkg:apk/alpine/gitlab-runner@15.10.0-r0?arch=aarch64&distroversion=v3.19&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/gitlab-runner@15.10.0-r0%3Farch=aarch64&distroversion=v3.19&reponame=community
aliases CVE-2022-1996, GHSA-r48q-9g5r-8q2h
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wqqa-tzs4-kugj
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:apk/alpine/gitlab-runner@15.10.0-r0%3Farch=aarch64&distroversion=v3.19&reponame=community