Lookup for vulnerable packages by Package URL.

Purlpkg:maven/io.gitlab.arturbosch.detekt/detekt-core@1.20.0
Typemaven
Namespaceio.gitlab.arturbosch.detekt
Namedetekt-core
Version1.20.0
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version1.20.0
Latest_non_vulnerable_version1.20.0
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-eu3k-cw2y-2kdp
vulnerability_id VCID-eu3k-cw2y-2kdp
summary
XML External Entity Reference in detekt
Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0272
reference_id
reference_type
scores
0
value 0.00303
scoring_system epss
scoring_elements 0.53842
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0272
1
reference_url https://github.com/detekt/detekt/commit/c965a8d2a6bbdb9bcfc6acfa7bbffd3da81f5395
reference_id
reference_type
scores
url https://github.com/detekt/detekt/commit/c965a8d2a6bbdb9bcfc6acfa7bbffd3da81f5395
2
reference_url https://huntr.dev/bounties/23e37ba7-96d5-4037-a90a-8c8f4a70ce44
reference_id
reference_type
scores
url https://huntr.dev/bounties/23e37ba7-96d5-4037-a90a-8c8f4a70ce44
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0272
reference_id CVE-2022-0272
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-0272
4
reference_url https://github.com/advisories/GHSA-2cfc-865j-gm4w
reference_id GHSA-2cfc-865j-gm4w
reference_type
scores
url https://github.com/advisories/GHSA-2cfc-865j-gm4w
fixed_packages
0
url pkg:maven/io.gitlab.arturbosch.detekt/detekt-core@1.20.0
purl pkg:maven/io.gitlab.arturbosch.detekt/detekt-core@1.20.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/io.gitlab.arturbosch.detekt/detekt-core@1.20.0
aliases CVE-2022-0272, GHSA-2cfc-865j-gm4w
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-eu3k-cw2y-2kdp
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/io.gitlab.arturbosch.detekt/detekt-core@1.20.0