Lookup for vulnerable packages by Package URL.

Purlpkg:maven/com.liferay.commerce/com.liferay.commerce.catalog.web@4.0.8
Typemaven
Namespacecom.liferay.commerce
Namecom.liferay.commerce.catalog.web
Version4.0.8
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version4.0.8
Latest_non_vulnerable_version4.0.8
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-aek3-barj-vygt
vulnerability_id VCID-aek3-barj-vygt
summary
references
0
reference_url http://liferay.com
reference_id
reference_type
scores
url http://liferay.com
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-42119
reference_id
reference_type
scores
0
value 0.0064
scoring_system epss
scoring_elements 0.70882
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-42119
2
reference_url https://github.com/liferay/liferay-portal/commit/2e02110747dd5cccb978623545bfa1f3ad0a5602
reference_id
reference_type
scores
url https://github.com/liferay/liferay-portal/commit/2e02110747dd5cccb978623545bfa1f3ad0a5602
3
reference_url https://issues.liferay.com/browse/LPE-17632
reference_id
reference_type
scores
url https://issues.liferay.com/browse/LPE-17632
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-42119
reference_id CVE-2022-42119
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-42119
5
reference_url https://web.archive.org/web/20221115040019/https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-42119
reference_id CVE-2022-42119
reference_type
scores
url https://web.archive.org/web/20221115040019/https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-42119
6
reference_url https://github.com/advisories/GHSA-wjfm-qxg2-q679
reference_id GHSA-wjfm-qxg2-q679
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-wjfm-qxg2-q679
fixed_packages
0
url pkg:maven/com.liferay.commerce/com.liferay.commerce.catalog.web@4.0.8
purl pkg:maven/com.liferay.commerce/com.liferay.commerce.catalog.web@4.0.8
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay.commerce/com.liferay.commerce.catalog.web@4.0.8
aliases CVE-2022-42119, GHSA-wjfm-qxg2-q679
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-aek3-barj-vygt
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/com.liferay.commerce/com.liferay.commerce.catalog.web@4.0.8