Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/264140?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/264140?format=api", "purl": "pkg:apk/alpine/firefox@99.0-r0?arch=x86_64&distroversion=v3.17&reponame=community", "type": "apk", "namespace": "alpine", "name": "firefox", "version": "99.0-r0", "qualifiers": { "arch": "x86_64", "distroversion": "v3.17", "reponame": "community" }, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": "100.0-r0", "latest_non_vulnerable_version": "103.0-r0", "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3026?format=api", "vulnerability_id": "VCID-65um-qxwc-2fa9", "summary": "multiple issues", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-28282.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-28282.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-28282", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.08076", "scoring_system": "epss", "scoring_elements": "0.9227", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-28282" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1097", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1097" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1196", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1196" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1197", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1197" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24713", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24713" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28281", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28281" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28282", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28282" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28285", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28285" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28286", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28286" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28289", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28289" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2072562", "reference_id": "2072562", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2072562" }, { "reference_url": "https://security.archlinux.org/AVG-2711", "reference_id": "AVG-2711", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2711" }, { "reference_url": "https://security.archlinux.org/AVG-2712", "reference_id": "AVG-2712", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2712" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2022-13", "reference_id": "mfsa2022-13", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2022-13" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2022-13/", "reference_id": "mfsa2022-13", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-15T20:08:53Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2022-13/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2022-14", "reference_id": "mfsa2022-14", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2022-14" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2022-14/", "reference_id": "mfsa2022-14", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-15T20:08:53Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2022-14/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2022-15", "reference_id": "mfsa2022-15", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2022-15" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2022-15/", "reference_id": "mfsa2022-15", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-15T20:08:53Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2022-15/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1283", "reference_id": "RHSA-2022:1283", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1283" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1284", "reference_id": "RHSA-2022:1284", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1284" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1285", "reference_id": "RHSA-2022:1285", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1285" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1286", "reference_id": "RHSA-2022:1286", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1286" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1287", "reference_id": "RHSA-2022:1287", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1287" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1301", "reference_id": "RHSA-2022:1301", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1301" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1302", "reference_id": "RHSA-2022:1302", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1302" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1303", "reference_id": "RHSA-2022:1303", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1303" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1305", "reference_id": "RHSA-2022:1305", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1305" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1326", "reference_id": "RHSA-2022:1326", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1326" }, { "reference_url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1751609", "reference_id": "show_bug.cgi?id=1751609", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-15T20:08:53Z/" } ], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1751609" }, { "reference_url": "https://usn.ubuntu.com/5370-1/", "reference_id": "USN-5370-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5370-1/" }, { "reference_url": "https://usn.ubuntu.com/5393-1/", "reference_id": "USN-5393-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5393-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/264140?format=api", "purl": "pkg:apk/alpine/firefox@99.0-r0?arch=x86_64&distroversion=v3.17&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/firefox@99.0-r0%3Farch=x86_64&distroversion=v3.17&reponame=community" } ], "aliases": [ "CVE-2022-28282" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-65um-qxwc-2fa9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3042?format=api", "vulnerability_id": "VCID-dxhw-19cx-xue6", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-28287", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00235", "scoring_system": "epss", "scoring_elements": "0.46574", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-28287" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://security.archlinux.org/AVG-2711", "reference_id": "AVG-2711", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2711" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2022-13", "reference_id": "mfsa2022-13", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2022-13" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2022-13/", "reference_id": "mfsa2022-13", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-16T14:01:25Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2022-13/" }, { "reference_url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1741515", "reference_id": "show_bug.cgi?id=1741515", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-16T14:01:25Z/" } ], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1741515" }, { "reference_url": "https://usn.ubuntu.com/5370-1/", "reference_id": "USN-5370-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5370-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/264140?format=api", "purl": "pkg:apk/alpine/firefox@99.0-r0?arch=x86_64&distroversion=v3.17&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/firefox@99.0-r0%3Farch=x86_64&distroversion=v3.17&reponame=community" } ], "aliases": [ "CVE-2022-28287" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-dxhw-19cx-xue6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3044?format=api", "vulnerability_id": "VCID-g4q3-em7e-2uhn", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-28283", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00323", "scoring_system": "epss", "scoring_elements": "0.5564", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-28283" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://security.archlinux.org/AVG-2711", "reference_id": "AVG-2711", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2711" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2022-13", "reference_id": "mfsa2022-13", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2022-13" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2022-13/", "reference_id": "mfsa2022-13", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-16T14:14:12Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2022-13/" }, { "reference_url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1754066", "reference_id": "show_bug.cgi?id=1754066", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-16T14:14:12Z/" } ], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1754066" }, { "reference_url": "https://usn.ubuntu.com/5370-1/", "reference_id": "USN-5370-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5370-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/264140?format=api", "purl": "pkg:apk/alpine/firefox@99.0-r0?arch=x86_64&distroversion=v3.17&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/firefox@99.0-r0%3Farch=x86_64&distroversion=v3.17&reponame=community" } ], "aliases": [ "CVE-2022-28283" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-g4q3-em7e-2uhn" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3041?format=api", "vulnerability_id": "VCID-j7h1-8a4q-4ud7", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-28288", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00359", "scoring_system": "epss", "scoring_elements": "0.58359", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-28288" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://security.archlinux.org/AVG-2711", "reference_id": "AVG-2711", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2711" }, { "reference_url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1746415%2C1746495%2C1746500%2C1747282%2C1748759%2C1749056%2C1749786%2C1751679%2C1752120%2C1756010%2C1756017%2C1757213%2C1757258%2C1757427", "reference_id": "buglist.cgi?bug_id=1746415%2C1746495%2C1746500%2C1747282%2C1748759%2C1749056%2C1749786%2C1751679%2C1752120%2C1756010%2C1756017%2C1757213%2C1757258%2C1757427", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-16T14:00:32Z/" } ], "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1746415%2C1746495%2C1746500%2C1747282%2C1748759%2C1749056%2C1749786%2C1751679%2C1752120%2C1756010%2C1756017%2C1757213%2C1757258%2C1757427" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2022-13", "reference_id": "mfsa2022-13", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2022-13" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2022-13/", "reference_id": "mfsa2022-13", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-16T14:00:32Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2022-13/" }, { "reference_url": "https://usn.ubuntu.com/5370-1/", "reference_id": "USN-5370-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5370-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/264140?format=api", "purl": "pkg:apk/alpine/firefox@99.0-r0?arch=x86_64&distroversion=v3.17&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/firefox@99.0-r0%3Farch=x86_64&distroversion=v3.17&reponame=community" } ], "aliases": [ "CVE-2022-28288" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-j7h1-8a4q-4ud7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3025?format=api", "vulnerability_id": "VCID-n1dx-px7c-ffh9", "summary": "multiple issues", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-28285.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-28285.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-28285", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00365", "scoring_system": "epss", "scoring_elements": "0.58758", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-28285" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1097", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1097" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1196", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1196" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1197", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1197" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24713", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24713" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28281", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28281" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28282", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28282" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28285", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28285" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28286", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28286" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28289", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28289" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2072563", "reference_id": "2072563", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2072563" }, { "reference_url": "https://security.archlinux.org/AVG-2711", "reference_id": "AVG-2711", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2711" }, { "reference_url": "https://security.archlinux.org/AVG-2712", "reference_id": "AVG-2712", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2712" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2022-13", "reference_id": "mfsa2022-13", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2022-13" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2022-13/", "reference_id": "mfsa2022-13", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-16T14:03:24Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2022-13/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2022-14", "reference_id": "mfsa2022-14", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2022-14" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2022-14/", "reference_id": "mfsa2022-14", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-16T14:03:24Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2022-14/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2022-15", "reference_id": "mfsa2022-15", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2022-15" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2022-15/", "reference_id": "mfsa2022-15", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-16T14:03:24Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2022-15/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1283", "reference_id": "RHSA-2022:1283", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1283" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1284", "reference_id": "RHSA-2022:1284", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1284" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1285", "reference_id": "RHSA-2022:1285", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1285" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1286", "reference_id": "RHSA-2022:1286", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1286" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1287", "reference_id": "RHSA-2022:1287", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1287" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1301", "reference_id": "RHSA-2022:1301", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1301" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1302", "reference_id": "RHSA-2022:1302", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1302" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1303", "reference_id": "RHSA-2022:1303", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1303" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1305", "reference_id": "RHSA-2022:1305", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1305" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1326", "reference_id": "RHSA-2022:1326", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1326" }, { "reference_url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1756957", "reference_id": "show_bug.cgi?id=1756957", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-16T14:03:24Z/" } ], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1756957" }, { "reference_url": "https://usn.ubuntu.com/5370-1/", "reference_id": "USN-5370-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5370-1/" }, { "reference_url": "https://usn.ubuntu.com/5393-1/", "reference_id": "USN-5393-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5393-1/" }, { "reference_url": "https://usn.ubuntu.com/5494-1/", "reference_id": "USN-5494-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5494-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/264140?format=api", "purl": "pkg:apk/alpine/firefox@99.0-r0?arch=x86_64&distroversion=v3.17&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/firefox@99.0-r0%3Farch=x86_64&distroversion=v3.17&reponame=community" } ], "aliases": [ "CVE-2022-28285" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-n1dx-px7c-ffh9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3024?format=api", "vulnerability_id": "VCID-sa8r-3pja-j3a5", "summary": "multiple issues", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-28286.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-28286.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-28286", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0035", "scoring_system": "epss", "scoring_elements": "0.57734", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-28286" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1097", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1097" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1196", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1196" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1197", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1197" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24713", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24713" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28281", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28281" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28282", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28282" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28285", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28285" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28286", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28286" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28289", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28289" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2072564", "reference_id": "2072564", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2072564" }, { "reference_url": "https://security.archlinux.org/AVG-2711", "reference_id": "AVG-2711", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2711" }, { "reference_url": "https://security.archlinux.org/AVG-2712", "reference_id": "AVG-2712", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2712" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2022-13", "reference_id": "mfsa2022-13", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2022-13" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2022-13/", "reference_id": "mfsa2022-13", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-16T14:02:32Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2022-13/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2022-14", "reference_id": "mfsa2022-14", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2022-14" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2022-14/", "reference_id": "mfsa2022-14", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-16T14:02:32Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2022-14/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2022-15", "reference_id": "mfsa2022-15", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2022-15" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2022-15/", "reference_id": "mfsa2022-15", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-16T14:02:32Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2022-15/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1283", "reference_id": "RHSA-2022:1283", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1283" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1284", "reference_id": "RHSA-2022:1284", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1284" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1285", "reference_id": "RHSA-2022:1285", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1285" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1286", "reference_id": "RHSA-2022:1286", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1286" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1287", "reference_id": "RHSA-2022:1287", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1287" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1301", "reference_id": "RHSA-2022:1301", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1301" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1302", "reference_id": "RHSA-2022:1302", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1302" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1303", "reference_id": "RHSA-2022:1303", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1303" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1305", "reference_id": "RHSA-2022:1305", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1305" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1326", "reference_id": "RHSA-2022:1326", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1326" }, { "reference_url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1735265", "reference_id": "show_bug.cgi?id=1735265", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-16T14:02:32Z/" } ], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1735265" }, { "reference_url": "https://usn.ubuntu.com/5370-1/", "reference_id": "USN-5370-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5370-1/" }, { "reference_url": "https://usn.ubuntu.com/5393-1/", "reference_id": "USN-5393-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5393-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/264140?format=api", "purl": "pkg:apk/alpine/firefox@99.0-r0?arch=x86_64&distroversion=v3.17&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/firefox@99.0-r0%3Farch=x86_64&distroversion=v3.17&reponame=community" } ], "aliases": [ "CVE-2022-28286" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-sa8r-3pja-j3a5" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/firefox@99.0-r0%3Farch=x86_64&distroversion=v3.17&reponame=community" }