Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/2523?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/2523?format=api", "purl": "pkg:alpm/archlinux/firefox@85.0-1", "type": "alpm", "namespace": "archlinux", "name": "firefox", "version": "85.0-1", "qualifiers": {}, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": "86.0-1", "latest_non_vulnerable_version": "101.0-1", "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/1388?format=api", "vulnerability_id": "VCID-afj4-ydes-skcg", "summary": "The browser could have been confused into transferring a screen sharing state into another tab, which would leak unintended information.", "references": [ { "reference_url": "https://security.archlinux.org/ASA-202102-1", "reference_id": "ASA-202102-1", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202102-1" }, { "reference_url": "https://security.archlinux.org/AVG-1492", "reference_id": "AVG-1492", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1492" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-03", "reference_id": "mfsa2021-03", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-03" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/2523?format=api", "purl": "pkg:alpm/archlinux/firefox@85.0-1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@85.0-1" } ], "aliases": [ "CVE-2021-23958" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-afj4-ydes-skcg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/1391?format=api", "vulnerability_id": "VCID-bwz1-2cdx-rkbu", "summary": "When sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC sharing state in the user interface, leading to loss of control over the currently granted permission", "references": [ { "reference_url": "https://security.archlinux.org/ASA-202102-1", "reference_id": "ASA-202102-1", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202102-1" }, { "reference_url": "https://security.archlinux.org/AVG-1492", "reference_id": "AVG-1492", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1492" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-03", "reference_id": "mfsa2021-03", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-03" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/2523?format=api", "purl": "pkg:alpm/archlinux/firefox@85.0-1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@85.0-1" } ], "aliases": [ "CVE-2021-23963" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bwz1-2cdx-rkbu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/1383?format=api", "vulnerability_id": "VCID-j7vw-1pq3-efgp", "summary": "Performing garbage collection on re-declared JavaScript variables resulted in a user-after-poison, and a potentially exploitable crash.", "references": [ { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15685", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15685" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16044", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16044" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26976", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26976" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23953", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23953" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23954", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23954" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23960", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23960" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23964", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23964" }, { "reference_url": "https://security.archlinux.org/ASA-202102-1", "reference_id": "ASA-202102-1", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202102-1" }, { "reference_url": "https://security.archlinux.org/ASA-202102-2", "reference_id": "ASA-202102-2", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202102-2" }, { "reference_url": "https://security.archlinux.org/AVG-1492", "reference_id": "AVG-1492", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1492" }, { "reference_url": "https://security.archlinux.org/AVG-1496", "reference_id": "AVG-1496", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1496" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-03", "reference_id": "mfsa2021-03", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-03" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-04", "reference_id": "mfsa2021-04", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-04" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-05", "reference_id": "mfsa2021-05", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-05" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/2523?format=api", "purl": "pkg:alpm/archlinux/firefox@85.0-1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@85.0-1" } ], "aliases": [ "CVE-2021-23960" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-j7vw-1pq3-efgp" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/1381?format=api", "vulnerability_id": "VCID-njy9-s1vq-n3f8", "summary": "If a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking cross-origin information, when said information is served as chunked data.", "references": [ { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15685", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15685" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16044", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16044" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26976", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26976" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23953", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23953" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23954", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23954" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23960", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23960" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23964", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23964" }, { "reference_url": "https://security.archlinux.org/ASA-202102-1", "reference_id": "ASA-202102-1", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202102-1" }, { "reference_url": "https://security.archlinux.org/ASA-202102-2", "reference_id": "ASA-202102-2", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202102-2" }, { "reference_url": "https://security.archlinux.org/AVG-1492", "reference_id": "AVG-1492", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1492" }, { "reference_url": "https://security.archlinux.org/AVG-1496", "reference_id": "AVG-1496", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1496" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-03", "reference_id": "mfsa2021-03", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-03" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-04", "reference_id": "mfsa2021-04", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-04" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-05", "reference_id": "mfsa2021-05", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-05" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/2523?format=api", "purl": "pkg:alpm/archlinux/firefox@85.0-1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@85.0-1" } ], "aliases": [ "CVE-2021-23953" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-njy9-s1vq-n3f8" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/1385?format=api", "vulnerability_id": "VCID-s58p-5q9h-nygy", "summary": "The browser could have been confused into transferring a pointer lock state into another tab, which could have lead to clickjacking attacks.", "references": [ { "reference_url": "https://security.archlinux.org/ASA-202102-1", "reference_id": "ASA-202102-1", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202102-1" }, { "reference_url": "https://security.archlinux.org/AVG-1492", "reference_id": "AVG-1492", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1492" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-03", "reference_id": "mfsa2021-03", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-03" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/2523?format=api", "purl": "pkg:alpm/archlinux/firefox@85.0-1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@85.0-1" } ], "aliases": [ "CVE-2021-23955" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-s58p-5q9h-nygy" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/1392?format=api", "vulnerability_id": "VCID-t1zt-juvj-1yhz", "summary": "Mozilla developers Sebastian Hengst, Christian Holler, Tyson Smith reported memory safety bugs present in Firefox 84. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", "references": [ { "reference_url": "https://security.archlinux.org/ASA-202102-1", "reference_id": "ASA-202102-1", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202102-1" }, { "reference_url": "https://security.archlinux.org/AVG-1492", "reference_id": "AVG-1492", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1492" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-03", "reference_id": "mfsa2021-03", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-03" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/2523?format=api", "purl": "pkg:alpm/archlinux/firefox@85.0-1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@85.0-1" } ], "aliases": [ "CVE-2021-23965" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-t1zt-juvj-1yhz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/1384?format=api", "vulnerability_id": "VCID-tpfc-xpfq-s3e8", "summary": "Mozilla developers Alexis Beingessner, Christian Holler, Andrew McCreight, Tyson Smith, Jon Coppeard, André Bargull, Jason Kratzer, Jesse Schwartzentruber, Steve Fink, Byron Campen reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", "references": [ { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15685", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15685" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16044", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16044" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26976", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26976" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23953", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23953" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23954", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23954" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23960", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23960" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23964", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23964" }, { "reference_url": "https://security.archlinux.org/ASA-202102-1", "reference_id": "ASA-202102-1", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202102-1" }, { "reference_url": "https://security.archlinux.org/ASA-202102-2", "reference_id": "ASA-202102-2", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202102-2" }, { "reference_url": "https://security.archlinux.org/AVG-1492", "reference_id": "AVG-1492", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1492" }, { "reference_url": "https://security.archlinux.org/AVG-1496", "reference_id": "AVG-1496", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1496" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-03", "reference_id": "mfsa2021-03", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-03" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-04", "reference_id": "mfsa2021-04", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-04" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-05", "reference_id": "mfsa2021-05", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-05" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/2523?format=api", "purl": "pkg:alpm/archlinux/firefox@85.0-1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@85.0-1" } ], "aliases": [ "CVE-2021-23964" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-tpfc-xpfq-s3e8" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/1382?format=api", "vulnerability_id": "VCID-w7xr-wxmq-u7dw", "summary": "Using the new logical assignment operators in a JavaScript switch statement could have caused a type confusion, leading to a memory corruption and a potentially exploitable crash.", "references": [ { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15685", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15685" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16044", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16044" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26976", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26976" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23953", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23953" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23954", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23954" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23960", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23960" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23964", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23964" }, { "reference_url": "https://security.archlinux.org/ASA-202102-1", "reference_id": "ASA-202102-1", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202102-1" }, { "reference_url": "https://security.archlinux.org/ASA-202102-2", "reference_id": "ASA-202102-2", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202102-2" }, { "reference_url": "https://security.archlinux.org/AVG-1492", "reference_id": "AVG-1492", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1492" }, { "reference_url": "https://security.archlinux.org/AVG-1496", "reference_id": "AVG-1496", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1496" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-03", "reference_id": "mfsa2021-03", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-03" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-04", "reference_id": "mfsa2021-04", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-04" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-05", "reference_id": "mfsa2021-05", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-05" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/2523?format=api", "purl": "pkg:alpm/archlinux/firefox@85.0-1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@85.0-1" } ], "aliases": [ "CVE-2021-23954" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-w7xr-wxmq-u7dw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/1386?format=api", "vulnerability_id": "VCID-wbvg-q4ns-4ke7", "summary": "An ambiguous file picker design could have confused users who intended to select and upload a single file into uploading a whole directory. This was addressed by adding a new prompt.", "references": [ { "reference_url": "https://security.archlinux.org/ASA-202102-1", "reference_id": "ASA-202102-1", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202102-1" }, { "reference_url": "https://security.archlinux.org/AVG-1492", "reference_id": "AVG-1492", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1492" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-03", "reference_id": "mfsa2021-03", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-03" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/2523?format=api", "purl": "pkg:alpm/archlinux/firefox@85.0-1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@85.0-1" } ], "aliases": [ "CVE-2021-23956" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-wbvg-q4ns-4ke7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/1390?format=api", "vulnerability_id": "VCID-zfew-pepx-uuf8", "summary": "Incorrect use of the RowCountChanged method could have led to a user-after-poison and a potentially exploitable crash.", "references": [ { "reference_url": "https://security.archlinux.org/ASA-202102-1", "reference_id": "ASA-202102-1", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202102-1" }, { "reference_url": "https://security.archlinux.org/AVG-1492", "reference_id": "AVG-1492", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1492" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-03", "reference_id": "mfsa2021-03", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-03" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/2523?format=api", "purl": "pkg:alpm/archlinux/firefox@85.0-1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@85.0-1" } ], "aliases": [ "CVE-2021-23962" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zfew-pepx-uuf8" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/1256?format=api", "vulnerability_id": "VCID-zuvn-gw4m-47c9", "summary": "Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine.", "references": [ { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23961", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23961" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23991", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23991" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23992", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23992" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23993", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23993" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23994", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23994" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23995", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23995" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23998", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23998" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23999", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23999" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-24002", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-24002" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29945", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29945" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29946", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29946" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29948", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29948" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29949", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29949" }, { "reference_url": "https://security.archlinux.org/ASA-202102-1", "reference_id": "ASA-202102-1", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202102-1" }, { "reference_url": "https://security.archlinux.org/ASA-202104-4", "reference_id": "ASA-202104-4", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202104-4" }, { "reference_url": "https://security.archlinux.org/AVG-1492", "reference_id": "AVG-1492", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1492" }, { "reference_url": "https://security.archlinux.org/AVG-1836", "reference_id": "AVG-1836", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1836" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-03", "reference_id": "mfsa2021-03", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-03" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-14", "reference_id": "mfsa2021-14", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-14" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-15", "reference_id": "mfsa2021-15", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2021-15" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/2523?format=api", "purl": "pkg:alpm/archlinux/firefox@85.0-1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@85.0-1" } ], "aliases": [ "CVE-2021-23961" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zuvn-gw4m-47c9" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@85.0-1" }