Lookup for vulnerable packages by Package URL.
| Purl | pkg:alpm/archlinux/firefox@92.0-1 |
| Type | alpm |
| Namespace | archlinux |
| Name | firefox |
| Version | 92.0-1 |
| Qualifiers |
|
| Subpath | |
| Is_vulnerable | false |
| Next_non_vulnerable_version | 94.0-1 |
| Latest_non_vulnerable_version | 101.0-1 |
| Affected_by_vulnerabilities |
|
| Fixing_vulnerabilities |
| 0 |
| url |
VCID-7fvy-7hpe-kbej |
| vulnerability_id |
VCID-7fvy-7hpe-kbej |
| summary |
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38492 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00406 |
| scoring_system |
epss |
| scoring_elements |
0.61091 |
| published_at |
2026-04-21T12:55:00Z |
|
| 1 |
| value |
0.00406 |
| scoring_system |
epss |
| scoring_elements |
0.61009 |
| published_at |
2026-04-07T12:55:00Z |
|
| 2 |
| value |
0.00406 |
| scoring_system |
epss |
| scoring_elements |
0.61057 |
| published_at |
2026-04-08T12:55:00Z |
|
| 3 |
| value |
0.00406 |
| scoring_system |
epss |
| scoring_elements |
0.61073 |
| published_at |
2026-04-09T12:55:00Z |
|
| 4 |
| value |
0.00406 |
| scoring_system |
epss |
| scoring_elements |
0.61094 |
| published_at |
2026-04-11T12:55:00Z |
|
| 5 |
| value |
0.00406 |
| scoring_system |
epss |
| scoring_elements |
0.61081 |
| published_at |
2026-04-12T12:55:00Z |
|
| 6 |
| value |
0.00406 |
| scoring_system |
epss |
| scoring_elements |
0.61061 |
| published_at |
2026-04-13T12:55:00Z |
|
| 7 |
| value |
0.00406 |
| scoring_system |
epss |
| scoring_elements |
0.61103 |
| published_at |
2026-04-16T12:55:00Z |
|
| 8 |
| value |
0.00406 |
| scoring_system |
epss |
| scoring_elements |
0.61108 |
| published_at |
2026-04-18T12:55:00Z |
|
| 9 |
| value |
0.00406 |
| scoring_system |
epss |
| scoring_elements |
0.60938 |
| published_at |
2026-04-01T12:55:00Z |
|
| 10 |
| value |
0.00406 |
| scoring_system |
epss |
| scoring_elements |
0.61015 |
| published_at |
2026-04-02T12:55:00Z |
|
| 11 |
| value |
0.00406 |
| scoring_system |
epss |
| scoring_elements |
0.61044 |
| published_at |
2026-04-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38492 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-38492
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-7fvy-7hpe-kbej |
|
| 1 |
| url |
VCID-cede-kbgf-8bgd |
| vulnerability_id |
VCID-cede-kbgf-8bgd |
| summary |
Mozilla developers Christian Holler and Lars T Hansen reported memory safety bugs present in Firefox 91. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38494 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0042 |
| scoring_system |
epss |
| scoring_elements |
0.61975 |
| published_at |
2026-04-21T12:55:00Z |
|
| 1 |
| value |
0.0042 |
| scoring_system |
epss |
| scoring_elements |
0.61816 |
| published_at |
2026-04-01T12:55:00Z |
|
| 2 |
| value |
0.0042 |
| scoring_system |
epss |
| scoring_elements |
0.61989 |
| published_at |
2026-04-16T12:55:00Z |
|
| 3 |
| value |
0.0042 |
| scoring_system |
epss |
| scoring_elements |
0.61994 |
| published_at |
2026-04-18T12:55:00Z |
|
| 4 |
| value |
0.0042 |
| scoring_system |
epss |
| scoring_elements |
0.61889 |
| published_at |
2026-04-02T12:55:00Z |
|
| 5 |
| value |
0.0042 |
| scoring_system |
epss |
| scoring_elements |
0.6192 |
| published_at |
2026-04-04T12:55:00Z |
|
| 6 |
| value |
0.0042 |
| scoring_system |
epss |
| scoring_elements |
0.61891 |
| published_at |
2026-04-07T12:55:00Z |
|
| 7 |
| value |
0.0042 |
| scoring_system |
epss |
| scoring_elements |
0.6194 |
| published_at |
2026-04-08T12:55:00Z |
|
| 8 |
| value |
0.0042 |
| scoring_system |
epss |
| scoring_elements |
0.61958 |
| published_at |
2026-04-09T12:55:00Z |
|
| 9 |
| value |
0.0042 |
| scoring_system |
epss |
| scoring_elements |
0.61979 |
| published_at |
2026-04-11T12:55:00Z |
|
| 10 |
| value |
0.0042 |
| scoring_system |
epss |
| scoring_elements |
0.61968 |
| published_at |
2026-04-12T12:55:00Z |
|
| 11 |
| value |
0.0042 |
| scoring_system |
epss |
| scoring_elements |
0.61947 |
| published_at |
2026-04-13T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38494 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-38494
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-cede-kbgf-8bgd |
|
| 2 |
| url |
VCID-mj2t-phst-v7f8 |
| vulnerability_id |
VCID-mj2t-phst-v7f8 |
| summary |
Firefox for Android allowed navigations through the `intent://` protocol, which could be used to cause crashes and UI spoofs.
*This bug only affects Firefox for Android. Other operating systems are unaffected.* |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29993 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00401 |
| scoring_system |
epss |
| scoring_elements |
0.60772 |
| published_at |
2026-04-21T12:55:00Z |
|
| 1 |
| value |
0.00401 |
| scoring_system |
epss |
| scoring_elements |
0.60615 |
| published_at |
2026-04-01T12:55:00Z |
|
| 2 |
| value |
0.00401 |
| scoring_system |
epss |
| scoring_elements |
0.60783 |
| published_at |
2026-04-16T12:55:00Z |
|
| 3 |
| value |
0.00401 |
| scoring_system |
epss |
| scoring_elements |
0.60788 |
| published_at |
2026-04-18T12:55:00Z |
|
| 4 |
| value |
0.00401 |
| scoring_system |
epss |
| scoring_elements |
0.6069 |
| published_at |
2026-04-02T12:55:00Z |
|
| 5 |
| value |
0.00401 |
| scoring_system |
epss |
| scoring_elements |
0.60719 |
| published_at |
2026-04-04T12:55:00Z |
|
| 6 |
| value |
0.00401 |
| scoring_system |
epss |
| scoring_elements |
0.60685 |
| published_at |
2026-04-07T12:55:00Z |
|
| 7 |
| value |
0.00401 |
| scoring_system |
epss |
| scoring_elements |
0.60733 |
| published_at |
2026-04-08T12:55:00Z |
|
| 8 |
| value |
0.00401 |
| scoring_system |
epss |
| scoring_elements |
0.60749 |
| published_at |
2026-04-09T12:55:00Z |
|
| 9 |
| value |
0.00401 |
| scoring_system |
epss |
| scoring_elements |
0.60773 |
| published_at |
2026-04-11T12:55:00Z |
|
| 10 |
| value |
0.00401 |
| scoring_system |
epss |
| scoring_elements |
0.6076 |
| published_at |
2026-04-12T12:55:00Z |
|
| 11 |
| value |
0.00401 |
| scoring_system |
epss |
| scoring_elements |
0.60741 |
| published_at |
2026-04-13T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29993 |
|
| 1 |
|
| 2 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-29993
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-mj2t-phst-v7f8 |
|
| 3 |
| url |
VCID-zcuv-sdrv-1ffy |
| vulnerability_id |
VCID-zcuv-sdrv-1ffy |
| summary |
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38491 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00391 |
| scoring_system |
epss |
| scoring_elements |
0.60137 |
| published_at |
2026-04-21T12:55:00Z |
|
| 1 |
| value |
0.00391 |
| scoring_system |
epss |
| scoring_elements |
0.5998 |
| published_at |
2026-04-01T12:55:00Z |
|
| 2 |
| value |
0.00391 |
| scoring_system |
epss |
| scoring_elements |
0.60106 |
| published_at |
2026-04-13T12:55:00Z |
|
| 3 |
| value |
0.00391 |
| scoring_system |
epss |
| scoring_elements |
0.60144 |
| published_at |
2026-04-16T12:55:00Z |
|
| 4 |
| value |
0.00391 |
| scoring_system |
epss |
| scoring_elements |
0.60151 |
| published_at |
2026-04-18T12:55:00Z |
|
| 5 |
| value |
0.00391 |
| scoring_system |
epss |
| scoring_elements |
0.60058 |
| published_at |
2026-04-02T12:55:00Z |
|
| 6 |
| value |
0.00391 |
| scoring_system |
epss |
| scoring_elements |
0.60083 |
| published_at |
2026-04-04T12:55:00Z |
|
| 7 |
| value |
0.00391 |
| scoring_system |
epss |
| scoring_elements |
0.60053 |
| published_at |
2026-04-07T12:55:00Z |
|
| 8 |
| value |
0.00391 |
| scoring_system |
epss |
| scoring_elements |
0.60103 |
| published_at |
2026-04-08T12:55:00Z |
|
| 9 |
| value |
0.00391 |
| scoring_system |
epss |
| scoring_elements |
0.60117 |
| published_at |
2026-04-09T12:55:00Z |
|
| 10 |
| value |
0.00391 |
| scoring_system |
epss |
| scoring_elements |
0.60139 |
| published_at |
2026-04-11T12:55:00Z |
|
| 11 |
| value |
0.00391 |
| scoring_system |
epss |
| scoring_elements |
0.60124 |
| published_at |
2026-04-12T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38491 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-38491
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-zcuv-sdrv-1ffy |
|
|
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@92.0-1 |