Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/921691?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/921691?format=api", "purl": "pkg:deb/debian/chromium@124.0.6367.78-1?distro=trixie", "type": "deb", "namespace": "debian", "name": "chromium", "version": "124.0.6367.78-1", "qualifiers": { "distro": "trixie" }, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": "124.0.6367.118-1~deb12u1", "latest_non_vulnerable_version": "147.0.7727.101-1", "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/47469?format=api", "vulnerability_id": "VCID-4x4d-qvt8-93hx", "summary": "Multiple vulnerabilities have been discovered in QtWebEngine, the worst of which could lead to arbitrary code execution.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-4059", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00184", "scoring_system": "epss", "scoring_elements": "0.40071", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00184", "scoring_system": "epss", "scoring_elements": "0.40165", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00184", "scoring_system": "epss", "scoring_elements": "0.40177", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00184", "scoring_system": "epss", "scoring_elements": "0.4015", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00184", "scoring_system": "epss", "scoring_elements": "0.40131", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00184", "scoring_system": "epss", "scoring_elements": "0.4018", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00184", "scoring_system": "epss", "scoring_elements": "0.40151", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00184", "scoring_system": "epss", "scoring_elements": "0.40162", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00184", "scoring_system": "epss", "scoring_elements": "0.40188", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00184", "scoring_system": "epss", "scoring_elements": "0.40111", "published_at": "2026-04-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-4059" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4059", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4059" }, { "reference_url": "https://issues.chromium.org/issues/333182464", "reference_id": "333182464", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-01T13:45:44Z/" } ], "url": "https://issues.chromium.org/issues/333182464" }, { "reference_url": "https://security.gentoo.org/glsa/202412-05", "reference_id": "GLSA-202412-05", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202412-05" }, { "reference_url": "https://security.gentoo.org/glsa/202501-09", "reference_id": "GLSA-202501-09", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202501-09" }, { "reference_url": "https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_24.html", "reference_id": "stable-channel-update-for-desktop_24.html", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-01T13:45:44Z/" } ], "url": "https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_24.html" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOC3HLIZCGMIJLJ6LME5UWUUIFLXEGRN/", "reference_id": "UOC3HLIZCGMIJLJ6LME5UWUUIFLXEGRN", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-01T13:45:44Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOC3HLIZCGMIJLJ6LME5UWUUIFLXEGRN/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/921690?format=api", "purl": "pkg:deb/debian/chromium@124.0.6367.78-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@124.0.6367.78-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921691?format=api", "purl": "pkg:deb/debian/chromium@124.0.6367.78-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@124.0.6367.78-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582091?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.153-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gbt-xkej-k7aw" }, { "vulnerability": "VCID-2s6k-knqz-s7bv" }, { "vulnerability": "VCID-32xu-tbuh-nfds" }, { "vulnerability": "VCID-5znj-k78s-suca" }, { "vulnerability": "VCID-6dub-gz8z-m3fk" }, { "vulnerability": "VCID-7gex-zf7d-5ka4" }, { "vulnerability": "VCID-88yy-dyf6-cue7" }, { "vulnerability": "VCID-8uaq-e8kp-87fs" }, { "vulnerability": "VCID-9p5u-1x3q-63dh" }, { "vulnerability": "VCID-9s6e-p69b-suep" }, { "vulnerability": "VCID-9sbp-bp4k-23cn" }, { "vulnerability": "VCID-ehkc-zgaa-23fy" }, { "vulnerability": "VCID-fene-srh1-b3gp" }, { "vulnerability": "VCID-jr1y-txur-ebgr" }, { "vulnerability": "VCID-n5d6-9gwm-vkc7" }, { "vulnerability": "VCID-pg29-vrqh-pka8" }, { "vulnerability": "VCID-pgw2-3qy2-5ban" }, { "vulnerability": "VCID-pmwr-4j1v-s7gu" }, { "vulnerability": "VCID-ptwz-uax5-mqbq" }, { "vulnerability": "VCID-pvbx-j8j1-dkb3" }, { "vulnerability": "VCID-q45n-pmfj-f7ae" }, { "vulnerability": "VCID-r2b4-pdwz-ybae" }, { "vulnerability": "VCID-v2gf-rqxb-57ae" }, { "vulnerability": "VCID-vscd-6s2t-bucr" }, { "vulnerability": "VCID-xfz2-cwzt-tqhz" }, { "vulnerability": "VCID-y17q-5gas-jke9" }, { "vulnerability": "VCID-z8nt-w84w-tkew" }, { "vulnerability": "VCID-zcq4-z2c5-2ffr" }, { "vulnerability": "VCID-zrnp-ujpt-tbee" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.153-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921650?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.177-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.177-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2024-4059" ], "risk_score": 3.0, "exploitability": "0.5", "weighted_severity": "5.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4x4d-qvt8-93hx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/47468?format=api", "vulnerability_id": "VCID-cwf5-rgck-rbbt", "summary": "Multiple vulnerabilities have been discovered in QtWebEngine, the worst of which could lead to arbitrary code execution.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-4058", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.06327", "scoring_system": "epss", "scoring_elements": "0.91001", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.06327", "scoring_system": "epss", "scoring_elements": "0.90952", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.06327", "scoring_system": "epss", "scoring_elements": "0.90963", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.06327", "scoring_system": "epss", "scoring_elements": "0.9097", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.06327", "scoring_system": "epss", "scoring_elements": "0.90978", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.06327", "scoring_system": "epss", "scoring_elements": "0.90979", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.06327", "scoring_system": "epss", "scoring_elements": "0.91003", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.06327", "scoring_system": "epss", "scoring_elements": "0.90933", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.06327", "scoring_system": "epss", "scoring_elements": "0.90942", "published_at": "2026-04-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-4058" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4058", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4058" }, { "reference_url": "https://issues.chromium.org/issues/332546345", "reference_id": "332546345", "reference_type": "", "scores": [ { "value": "9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-05-01T15:03:12Z/" } ], "url": "https://issues.chromium.org/issues/332546345" }, { "reference_url": "https://security.gentoo.org/glsa/202412-05", "reference_id": "GLSA-202412-05", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202412-05" }, { "reference_url": "https://security.gentoo.org/glsa/202501-09", "reference_id": "GLSA-202501-09", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202501-09" }, { "reference_url": "https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_24.html", "reference_id": "stable-channel-update-for-desktop_24.html", "reference_type": "", "scores": [ { "value": "9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-05-01T15:03:12Z/" } ], "url": "https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_24.html" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOC3HLIZCGMIJLJ6LME5UWUUIFLXEGRN/", "reference_id": "UOC3HLIZCGMIJLJ6LME5UWUUIFLXEGRN", "reference_type": "", "scores": [ { "value": "9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-05-01T15:03:12Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOC3HLIZCGMIJLJ6LME5UWUUIFLXEGRN/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/921690?format=api", "purl": "pkg:deb/debian/chromium@124.0.6367.78-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@124.0.6367.78-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921691?format=api", "purl": "pkg:deb/debian/chromium@124.0.6367.78-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@124.0.6367.78-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582091?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.153-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gbt-xkej-k7aw" }, { "vulnerability": "VCID-2s6k-knqz-s7bv" }, { "vulnerability": "VCID-32xu-tbuh-nfds" }, { "vulnerability": "VCID-5znj-k78s-suca" }, { "vulnerability": "VCID-6dub-gz8z-m3fk" }, { "vulnerability": "VCID-7gex-zf7d-5ka4" }, { "vulnerability": "VCID-88yy-dyf6-cue7" }, { "vulnerability": "VCID-8uaq-e8kp-87fs" }, { "vulnerability": "VCID-9p5u-1x3q-63dh" }, { "vulnerability": "VCID-9s6e-p69b-suep" }, { "vulnerability": "VCID-9sbp-bp4k-23cn" }, { "vulnerability": "VCID-ehkc-zgaa-23fy" }, { "vulnerability": "VCID-fene-srh1-b3gp" }, { "vulnerability": "VCID-jr1y-txur-ebgr" }, { "vulnerability": "VCID-n5d6-9gwm-vkc7" }, { "vulnerability": "VCID-pg29-vrqh-pka8" }, { "vulnerability": "VCID-pgw2-3qy2-5ban" }, { "vulnerability": "VCID-pmwr-4j1v-s7gu" }, { "vulnerability": "VCID-ptwz-uax5-mqbq" }, { "vulnerability": "VCID-pvbx-j8j1-dkb3" }, { "vulnerability": "VCID-q45n-pmfj-f7ae" }, { "vulnerability": "VCID-r2b4-pdwz-ybae" }, { "vulnerability": "VCID-v2gf-rqxb-57ae" }, { "vulnerability": "VCID-vscd-6s2t-bucr" }, { "vulnerability": "VCID-xfz2-cwzt-tqhz" }, { "vulnerability": "VCID-y17q-5gas-jke9" }, { "vulnerability": "VCID-z8nt-w84w-tkew" }, { "vulnerability": "VCID-zcq4-z2c5-2ffr" }, { "vulnerability": "VCID-zrnp-ujpt-tbee" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.153-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921650?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.177-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.177-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2024-4058" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-cwf5-rgck-rbbt" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/96362?format=api", "vulnerability_id": "VCID-w6gx-jt4u-rbh7", "summary": "Heap buffer overflow in PDF in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium)", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-7018", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00578", "scoring_system": "epss", "scoring_elements": "0.68878", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00578", "scoring_system": "epss", "scoring_elements": "0.68891", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00578", "scoring_system": "epss", "scoring_elements": "0.68901", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00578", "scoring_system": "epss", "scoring_elements": "0.68802", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00578", "scoring_system": "epss", "scoring_elements": "0.68822", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00578", "scoring_system": "epss", "scoring_elements": "0.68801", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00578", "scoring_system": "epss", "scoring_elements": "0.68852", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00578", "scoring_system": "epss", "scoring_elements": "0.68871", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00578", "scoring_system": "epss", "scoring_elements": "0.68893", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00578", "scoring_system": "epss", "scoring_elements": "0.68879", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00578", "scoring_system": "epss", "scoring_elements": "0.6885", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-7018" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7018", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7018" }, { "reference_url": "https://issues.chromium.org/issues/333414305", "reference_id": "333414305", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track*", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-09-24T19:57:40Z/" } ], "url": "https://issues.chromium.org/issues/333414305" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/921690?format=api", "purl": "pkg:deb/debian/chromium@124.0.6367.78-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@124.0.6367.78-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921691?format=api", "purl": "pkg:deb/debian/chromium@124.0.6367.78-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@124.0.6367.78-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582091?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.153-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gbt-xkej-k7aw" }, { "vulnerability": "VCID-2s6k-knqz-s7bv" }, { "vulnerability": "VCID-32xu-tbuh-nfds" }, { "vulnerability": "VCID-5znj-k78s-suca" }, { "vulnerability": "VCID-6dub-gz8z-m3fk" }, { "vulnerability": "VCID-7gex-zf7d-5ka4" }, { "vulnerability": "VCID-88yy-dyf6-cue7" }, { "vulnerability": "VCID-8uaq-e8kp-87fs" }, { "vulnerability": "VCID-9p5u-1x3q-63dh" }, { "vulnerability": "VCID-9s6e-p69b-suep" }, { "vulnerability": "VCID-9sbp-bp4k-23cn" }, { "vulnerability": "VCID-ehkc-zgaa-23fy" }, { "vulnerability": "VCID-fene-srh1-b3gp" }, { "vulnerability": "VCID-jr1y-txur-ebgr" }, { "vulnerability": "VCID-n5d6-9gwm-vkc7" }, { "vulnerability": "VCID-pg29-vrqh-pka8" }, { "vulnerability": "VCID-pgw2-3qy2-5ban" }, { "vulnerability": "VCID-pmwr-4j1v-s7gu" }, { "vulnerability": "VCID-ptwz-uax5-mqbq" }, { "vulnerability": "VCID-pvbx-j8j1-dkb3" }, { "vulnerability": "VCID-q45n-pmfj-f7ae" }, { "vulnerability": "VCID-r2b4-pdwz-ybae" }, { "vulnerability": "VCID-v2gf-rqxb-57ae" }, { "vulnerability": "VCID-vscd-6s2t-bucr" }, { "vulnerability": "VCID-xfz2-cwzt-tqhz" }, { "vulnerability": "VCID-y17q-5gas-jke9" }, { "vulnerability": "VCID-z8nt-w84w-tkew" }, { "vulnerability": "VCID-zcq4-z2c5-2ffr" }, { "vulnerability": "VCID-zrnp-ujpt-tbee" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.153-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921650?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.177-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.177-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2024-7018" ], "risk_score": 2.2, "exploitability": "0.5", "weighted_severity": "4.4", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-w6gx-jt4u-rbh7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/47470?format=api", "vulnerability_id": "VCID-xb38-zgjp-gygu", "summary": "Multiple vulnerabilities have been discovered in QtWebEngine, the worst of which could lead to arbitrary code execution.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-4060", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00218", "scoring_system": "epss", "scoring_elements": "0.44458", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00218", "scoring_system": "epss", "scoring_elements": "0.44492", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00218", "scoring_system": "epss", "scoring_elements": "0.44508", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00218", "scoring_system": "epss", "scoring_elements": "0.44479", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00218", "scoring_system": "epss", "scoring_elements": "0.4448", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00218", "scoring_system": "epss", "scoring_elements": "0.44536", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00218", "scoring_system": "epss", "scoring_elements": "0.44527", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00218", "scoring_system": "epss", "scoring_elements": "0.44475", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00218", "scoring_system": "epss", "scoring_elements": "0.44497", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00218", "scoring_system": "epss", "scoring_elements": "0.44434", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00218", "scoring_system": "epss", "scoring_elements": "0.44486", "published_at": "2026-04-08T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-4060" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4060", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4060" }, { "reference_url": "https://issues.chromium.org/issues/333420620", "reference_id": "333420620", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-05-01T14:49:26Z/" } ], "url": "https://issues.chromium.org/issues/333420620" }, { "reference_url": "https://security.gentoo.org/glsa/202412-05", "reference_id": "GLSA-202412-05", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202412-05" }, { "reference_url": "https://security.gentoo.org/glsa/202501-09", "reference_id": "GLSA-202501-09", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202501-09" }, { "reference_url": "https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_24.html", "reference_id": "stable-channel-update-for-desktop_24.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-05-01T14:49:26Z/" } ], "url": "https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_24.html" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOC3HLIZCGMIJLJ6LME5UWUUIFLXEGRN/", "reference_id": "UOC3HLIZCGMIJLJ6LME5UWUUIFLXEGRN", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-05-01T14:49:26Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOC3HLIZCGMIJLJ6LME5UWUUIFLXEGRN/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/921690?format=api", "purl": "pkg:deb/debian/chromium@124.0.6367.78-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@124.0.6367.78-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921691?format=api", "purl": "pkg:deb/debian/chromium@124.0.6367.78-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@124.0.6367.78-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582091?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.153-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gbt-xkej-k7aw" }, { "vulnerability": "VCID-2s6k-knqz-s7bv" }, { "vulnerability": "VCID-32xu-tbuh-nfds" }, { "vulnerability": "VCID-5znj-k78s-suca" }, { "vulnerability": "VCID-6dub-gz8z-m3fk" }, { "vulnerability": "VCID-7gex-zf7d-5ka4" }, { "vulnerability": "VCID-88yy-dyf6-cue7" }, { "vulnerability": "VCID-8uaq-e8kp-87fs" }, { "vulnerability": "VCID-9p5u-1x3q-63dh" }, { "vulnerability": "VCID-9s6e-p69b-suep" }, { "vulnerability": "VCID-9sbp-bp4k-23cn" }, { "vulnerability": "VCID-ehkc-zgaa-23fy" }, { "vulnerability": "VCID-fene-srh1-b3gp" }, { "vulnerability": "VCID-jr1y-txur-ebgr" }, { "vulnerability": "VCID-n5d6-9gwm-vkc7" }, { "vulnerability": "VCID-pg29-vrqh-pka8" }, { "vulnerability": "VCID-pgw2-3qy2-5ban" }, { "vulnerability": "VCID-pmwr-4j1v-s7gu" }, { "vulnerability": "VCID-ptwz-uax5-mqbq" }, { "vulnerability": "VCID-pvbx-j8j1-dkb3" }, { "vulnerability": "VCID-q45n-pmfj-f7ae" }, { "vulnerability": "VCID-r2b4-pdwz-ybae" }, { "vulnerability": "VCID-v2gf-rqxb-57ae" }, { "vulnerability": "VCID-vscd-6s2t-bucr" }, { "vulnerability": "VCID-xfz2-cwzt-tqhz" }, { "vulnerability": "VCID-y17q-5gas-jke9" }, { "vulnerability": "VCID-z8nt-w84w-tkew" }, { "vulnerability": "VCID-zcq4-z2c5-2ffr" }, { "vulnerability": "VCID-zrnp-ujpt-tbee" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.153-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921650?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.177-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.177-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2024-4060" ], "risk_score": 3.4, "exploitability": "0.5", "weighted_severity": "6.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xb38-zgjp-gygu" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@124.0.6367.78-1%3Fdistro=trixie" }