Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/921728?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/921728?format=api", "purl": "pkg:deb/debian/chromium@129.0.6668.58-1~deb12u1?distro=trixie", "type": "deb", "namespace": "debian", "name": "chromium", "version": "129.0.6668.58-1~deb12u1", "qualifiers": { "distro": "trixie" }, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": "129.0.6668.58-1", "latest_non_vulnerable_version": "147.0.7727.101-1", "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/96390?format=api", "vulnerability_id": "VCID-16jz-z9wn-ybeh", "summary": "Incorrect security UI in Downloads in Google Chrome prior to 129.0.6668.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-8906", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00122", "scoring_system": "epss", "scoring_elements": "0.31343", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00122", "scoring_system": "epss", "scoring_elements": "0.31395", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00122", "scoring_system": "epss", "scoring_elements": "0.31359", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00122", "scoring_system": "epss", "scoring_elements": "0.31392", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00122", "scoring_system": "epss", "scoring_elements": "0.31372", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00122", "scoring_system": "epss", "scoring_elements": "0.31491", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00122", "scoring_system": "epss", "scoring_elements": "0.31532", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00122", "scoring_system": "epss", "scoring_elements": "0.3135", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00122", "scoring_system": "epss", "scoring_elements": "0.31404", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00122", "scoring_system": "epss", "scoring_elements": "0.31434", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00122", "scoring_system": "epss", "scoring_elements": "0.31437", "published_at": "2026-04-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-8906" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8906", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8906" }, { "reference_url": "https://issues.chromium.org/issues/352681108", "reference_id": "352681108", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-18T15:33:04Z/" } ], "url": "https://issues.chromium.org/issues/352681108" }, { "reference_url": "https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop_17.html", "reference_id": "stable-channel-update-for-desktop_17.html", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-18T15:33:04Z/" } ], "url": "https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop_17.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/921728?format=api", "purl": "pkg:deb/debian/chromium@129.0.6668.58-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@129.0.6668.58-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921729?format=api", "purl": "pkg:deb/debian/chromium@129.0.6668.58-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@129.0.6668.58-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582091?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.153-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gbt-xkej-k7aw" }, { "vulnerability": "VCID-2s6k-knqz-s7bv" }, { "vulnerability": "VCID-32xu-tbuh-nfds" }, { "vulnerability": "VCID-5znj-k78s-suca" }, { "vulnerability": "VCID-6dub-gz8z-m3fk" }, { "vulnerability": "VCID-7gex-zf7d-5ka4" }, { "vulnerability": "VCID-88yy-dyf6-cue7" }, { "vulnerability": "VCID-8uaq-e8kp-87fs" }, { "vulnerability": "VCID-9p5u-1x3q-63dh" }, { "vulnerability": "VCID-9s6e-p69b-suep" }, { "vulnerability": "VCID-9sbp-bp4k-23cn" }, { "vulnerability": "VCID-ehkc-zgaa-23fy" }, { "vulnerability": "VCID-fene-srh1-b3gp" }, { "vulnerability": "VCID-jr1y-txur-ebgr" }, { "vulnerability": "VCID-n5d6-9gwm-vkc7" }, { "vulnerability": "VCID-pg29-vrqh-pka8" }, { "vulnerability": "VCID-pgw2-3qy2-5ban" }, { "vulnerability": "VCID-pmwr-4j1v-s7gu" }, { "vulnerability": "VCID-ptwz-uax5-mqbq" }, { "vulnerability": "VCID-pvbx-j8j1-dkb3" }, { "vulnerability": "VCID-q45n-pmfj-f7ae" }, { "vulnerability": "VCID-r2b4-pdwz-ybae" }, { "vulnerability": "VCID-v2gf-rqxb-57ae" }, { "vulnerability": "VCID-vscd-6s2t-bucr" }, { "vulnerability": "VCID-xfz2-cwzt-tqhz" }, { "vulnerability": "VCID-y17q-5gas-jke9" }, { "vulnerability": "VCID-z8nt-w84w-tkew" }, { "vulnerability": "VCID-zcq4-z2c5-2ffr" }, { "vulnerability": "VCID-zrnp-ujpt-tbee" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.153-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921650?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.177-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.177-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2024-8906" ], "risk_score": 1.3, "exploitability": "0.5", "weighted_severity": "2.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-16jz-z9wn-ybeh" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/96392?format=api", "vulnerability_id": "VCID-8zqx-ypy1-4uab", "summary": "Inappropriate implementation in Autofill in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-8908", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00082", "scoring_system": "epss", "scoring_elements": "0.24067", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00082", "scoring_system": "epss", "scoring_elements": "0.24143", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00082", "scoring_system": "epss", "scoring_elements": "0.24086", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00082", "scoring_system": "epss", "scoring_elements": "0.24099", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00082", "scoring_system": "epss", "scoring_elements": "0.24087", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00082", "scoring_system": "epss", "scoring_elements": "0.24234", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00082", "scoring_system": "epss", "scoring_elements": "0.24269", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00082", "scoring_system": "epss", "scoring_elements": "0.24055", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00082", "scoring_system": "epss", "scoring_elements": "0.24123", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00082", "scoring_system": "epss", "scoring_elements": "0.24167", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00082", "scoring_system": "epss", "scoring_elements": "0.24185", "published_at": "2026-04-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-8908" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8908", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8908" }, { "reference_url": "https://issues.chromium.org/issues/337222641", "reference_id": "337222641", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-18T14:46:36Z/" } ], "url": "https://issues.chromium.org/issues/337222641" }, { "reference_url": "https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop_17.html", "reference_id": "stable-channel-update-for-desktop_17.html", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-18T14:46:36Z/" } ], "url": "https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop_17.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/921728?format=api", "purl": "pkg:deb/debian/chromium@129.0.6668.58-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@129.0.6668.58-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921729?format=api", "purl": "pkg:deb/debian/chromium@129.0.6668.58-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@129.0.6668.58-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582091?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.153-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gbt-xkej-k7aw" }, { "vulnerability": "VCID-2s6k-knqz-s7bv" }, { "vulnerability": "VCID-32xu-tbuh-nfds" }, { "vulnerability": "VCID-5znj-k78s-suca" }, { "vulnerability": "VCID-6dub-gz8z-m3fk" }, { "vulnerability": "VCID-7gex-zf7d-5ka4" }, { "vulnerability": "VCID-88yy-dyf6-cue7" }, { "vulnerability": "VCID-8uaq-e8kp-87fs" }, { "vulnerability": "VCID-9p5u-1x3q-63dh" }, { "vulnerability": "VCID-9s6e-p69b-suep" }, { "vulnerability": "VCID-9sbp-bp4k-23cn" }, { "vulnerability": "VCID-ehkc-zgaa-23fy" }, { "vulnerability": "VCID-fene-srh1-b3gp" }, { "vulnerability": "VCID-jr1y-txur-ebgr" }, { "vulnerability": "VCID-n5d6-9gwm-vkc7" }, { "vulnerability": "VCID-pg29-vrqh-pka8" }, { "vulnerability": "VCID-pgw2-3qy2-5ban" }, { "vulnerability": "VCID-pmwr-4j1v-s7gu" }, { "vulnerability": "VCID-ptwz-uax5-mqbq" }, { "vulnerability": "VCID-pvbx-j8j1-dkb3" }, { "vulnerability": "VCID-q45n-pmfj-f7ae" }, { "vulnerability": "VCID-r2b4-pdwz-ybae" }, { "vulnerability": "VCID-v2gf-rqxb-57ae" }, { "vulnerability": "VCID-vscd-6s2t-bucr" }, { "vulnerability": "VCID-xfz2-cwzt-tqhz" }, { "vulnerability": "VCID-y17q-5gas-jke9" }, { "vulnerability": "VCID-z8nt-w84w-tkew" }, { "vulnerability": "VCID-zcq4-z2c5-2ffr" }, { "vulnerability": "VCID-zrnp-ujpt-tbee" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.153-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921650?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.177-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.177-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2024-8908" ], "risk_score": 1.3, "exploitability": "0.5", "weighted_severity": "2.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-8zqx-ypy1-4uab" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/96391?format=api", "vulnerability_id": "VCID-sxsf-3x3h-vff3", "summary": "Insufficient data validation in Omnibox in Google Chrome on Android prior to 129.0.6668.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject arbitrary scripts or HTML (XSS) via a crafted set of UI gestures. (Chromium security severity: Medium)", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-8907", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00069", "scoring_system": "epss", "scoring_elements": "0.21236", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00069", "scoring_system": "epss", "scoring_elements": "0.21309", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00069", "scoring_system": "epss", "scoring_elements": "0.21256", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00069", "scoring_system": "epss", "scoring_elements": "0.21249", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00069", "scoring_system": "epss", "scoring_elements": "0.21258", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00069", "scoring_system": "epss", "scoring_elements": "0.21393", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00069", "scoring_system": "epss", "scoring_elements": "0.21448", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00069", "scoring_system": "epss", "scoring_elements": "0.21199", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00069", "scoring_system": "epss", "scoring_elements": "0.21279", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00069", "scoring_system": "epss", "scoring_elements": "0.21341", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00069", "scoring_system": "epss", "scoring_elements": "0.21351", "published_at": "2026-04-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-8907" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8907", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8907" }, { "reference_url": "https://issues.chromium.org/issues/360642942", "reference_id": "360642942", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-18T15:32:10Z/" } ], "url": "https://issues.chromium.org/issues/360642942" }, { "reference_url": "https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop_17.html", "reference_id": "stable-channel-update-for-desktop_17.html", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-18T15:32:10Z/" } ], "url": "https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop_17.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/921728?format=api", "purl": "pkg:deb/debian/chromium@129.0.6668.58-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@129.0.6668.58-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921729?format=api", "purl": "pkg:deb/debian/chromium@129.0.6668.58-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@129.0.6668.58-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582091?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.153-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gbt-xkej-k7aw" }, { "vulnerability": "VCID-2s6k-knqz-s7bv" }, { "vulnerability": "VCID-32xu-tbuh-nfds" }, { "vulnerability": "VCID-5znj-k78s-suca" }, { "vulnerability": "VCID-6dub-gz8z-m3fk" }, { "vulnerability": "VCID-7gex-zf7d-5ka4" }, { "vulnerability": "VCID-88yy-dyf6-cue7" }, { "vulnerability": "VCID-8uaq-e8kp-87fs" }, { "vulnerability": "VCID-9p5u-1x3q-63dh" }, { "vulnerability": "VCID-9s6e-p69b-suep" }, { "vulnerability": "VCID-9sbp-bp4k-23cn" }, { "vulnerability": "VCID-ehkc-zgaa-23fy" }, { "vulnerability": "VCID-fene-srh1-b3gp" }, { "vulnerability": "VCID-jr1y-txur-ebgr" }, { "vulnerability": "VCID-n5d6-9gwm-vkc7" }, { "vulnerability": "VCID-pg29-vrqh-pka8" }, { "vulnerability": "VCID-pgw2-3qy2-5ban" }, { "vulnerability": "VCID-pmwr-4j1v-s7gu" }, { "vulnerability": "VCID-ptwz-uax5-mqbq" }, { "vulnerability": "VCID-pvbx-j8j1-dkb3" }, { "vulnerability": "VCID-q45n-pmfj-f7ae" }, { "vulnerability": "VCID-r2b4-pdwz-ybae" }, { "vulnerability": "VCID-v2gf-rqxb-57ae" }, { "vulnerability": "VCID-vscd-6s2t-bucr" }, { "vulnerability": "VCID-xfz2-cwzt-tqhz" }, { "vulnerability": "VCID-y17q-5gas-jke9" }, { "vulnerability": "VCID-z8nt-w84w-tkew" }, { "vulnerability": "VCID-zcq4-z2c5-2ffr" }, { "vulnerability": "VCID-zrnp-ujpt-tbee" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.153-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921650?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.177-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.177-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2024-8907" ], "risk_score": 1.9, "exploitability": "0.5", "weighted_severity": "3.7", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-sxsf-3x3h-vff3" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/96393?format=api", "vulnerability_id": "VCID-vafg-8w1y-8bb3", "summary": "Inappropriate implementation in UI in Google Chrome on iOS prior to 129.0.6668.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-8909", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00094", "scoring_system": "epss", "scoring_elements": "0.26313", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00094", "scoring_system": "epss", "scoring_elements": "0.26216", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00094", "scoring_system": "epss", "scoring_elements": "0.26274", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00094", "scoring_system": "epss", "scoring_elements": "0.2632", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00094", "scoring_system": "epss", "scoring_elements": "0.26382", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00094", "scoring_system": "epss", "scoring_elements": "0.26424", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00094", "scoring_system": "epss", "scoring_elements": "0.26197", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00094", "scoring_system": "epss", "scoring_elements": "0.26265", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00126", "scoring_system": "epss", "scoring_elements": "0.3187", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00126", "scoring_system": "epss", "scoring_elements": "0.31918", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00126", "scoring_system": "epss", "scoring_elements": "0.31898", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-8909" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8909", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8909" }, { "reference_url": "https://issues.chromium.org/issues/341353783", "reference_id": "341353783", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-18T14:46:00Z/" } ], "url": "https://issues.chromium.org/issues/341353783" }, { "reference_url": "https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop_17.html", "reference_id": "stable-channel-update-for-desktop_17.html", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-18T14:46:00Z/" } ], "url": "https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop_17.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/921728?format=api", "purl": "pkg:deb/debian/chromium@129.0.6668.58-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@129.0.6668.58-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921729?format=api", "purl": "pkg:deb/debian/chromium@129.0.6668.58-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@129.0.6668.58-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582091?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.153-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gbt-xkej-k7aw" }, { "vulnerability": "VCID-2s6k-knqz-s7bv" }, { "vulnerability": "VCID-32xu-tbuh-nfds" }, { "vulnerability": "VCID-5znj-k78s-suca" }, { "vulnerability": "VCID-6dub-gz8z-m3fk" }, { "vulnerability": "VCID-7gex-zf7d-5ka4" }, { "vulnerability": "VCID-88yy-dyf6-cue7" }, { "vulnerability": "VCID-8uaq-e8kp-87fs" }, { "vulnerability": "VCID-9p5u-1x3q-63dh" }, { "vulnerability": "VCID-9s6e-p69b-suep" }, { "vulnerability": "VCID-9sbp-bp4k-23cn" }, { "vulnerability": "VCID-ehkc-zgaa-23fy" }, { "vulnerability": "VCID-fene-srh1-b3gp" }, { "vulnerability": "VCID-jr1y-txur-ebgr" }, { "vulnerability": "VCID-n5d6-9gwm-vkc7" }, { "vulnerability": "VCID-pg29-vrqh-pka8" }, { "vulnerability": "VCID-pgw2-3qy2-5ban" }, { "vulnerability": "VCID-pmwr-4j1v-s7gu" }, { "vulnerability": "VCID-ptwz-uax5-mqbq" }, { "vulnerability": "VCID-pvbx-j8j1-dkb3" }, { "vulnerability": "VCID-q45n-pmfj-f7ae" }, { "vulnerability": "VCID-r2b4-pdwz-ybae" }, { "vulnerability": "VCID-v2gf-rqxb-57ae" }, { "vulnerability": "VCID-vscd-6s2t-bucr" }, { "vulnerability": "VCID-xfz2-cwzt-tqhz" }, { "vulnerability": "VCID-y17q-5gas-jke9" }, { "vulnerability": "VCID-z8nt-w84w-tkew" }, { "vulnerability": "VCID-zcq4-z2c5-2ffr" }, { "vulnerability": "VCID-zrnp-ujpt-tbee" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.153-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921650?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.177-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.177-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2024-8909" ], "risk_score": 1.3, "exploitability": "0.5", "weighted_severity": "2.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vafg-8w1y-8bb3" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/96389?format=api", "vulnerability_id": "VCID-z3hb-eha9-27a9", "summary": "Inappropriate implementation in V8 in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. (Chromium security severity: Medium)", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-8905", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00204", "scoring_system": "epss", "scoring_elements": "0.42575", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00204", "scoring_system": "epss", "scoring_elements": "0.42623", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00204", "scoring_system": "epss", "scoring_elements": "0.42595", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00204", "scoring_system": "epss", "scoring_elements": "0.42654", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00204", "scoring_system": "epss", "scoring_elements": "0.4264", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00204", "scoring_system": "epss", "scoring_elements": "0.42604", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00204", "scoring_system": "epss", "scoring_elements": "0.42633", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00204", "scoring_system": "epss", "scoring_elements": "0.42572", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00204", "scoring_system": "epss", "scoring_elements": "0.42624", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00204", "scoring_system": "epss", "scoring_elements": "0.42635", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00204", "scoring_system": "epss", "scoring_elements": "0.42659", "published_at": "2026-04-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-8905" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8905", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8905" }, { "reference_url": "https://issues.chromium.org/issues/359949835", "reference_id": "359949835", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-18T15:36:35Z/" } ], "url": "https://issues.chromium.org/issues/359949835" }, { "reference_url": "https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop_17.html", "reference_id": "stable-channel-update-for-desktop_17.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-18T15:36:35Z/" } ], "url": "https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop_17.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/921728?format=api", "purl": "pkg:deb/debian/chromium@129.0.6668.58-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@129.0.6668.58-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921729?format=api", "purl": "pkg:deb/debian/chromium@129.0.6668.58-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@129.0.6668.58-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582091?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.153-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gbt-xkej-k7aw" }, { "vulnerability": "VCID-2s6k-knqz-s7bv" }, { "vulnerability": "VCID-32xu-tbuh-nfds" }, { "vulnerability": "VCID-5znj-k78s-suca" }, { "vulnerability": "VCID-6dub-gz8z-m3fk" }, { "vulnerability": "VCID-7gex-zf7d-5ka4" }, { "vulnerability": "VCID-88yy-dyf6-cue7" }, { "vulnerability": "VCID-8uaq-e8kp-87fs" }, { "vulnerability": "VCID-9p5u-1x3q-63dh" }, { "vulnerability": "VCID-9s6e-p69b-suep" }, { "vulnerability": "VCID-9sbp-bp4k-23cn" }, { "vulnerability": "VCID-ehkc-zgaa-23fy" }, { "vulnerability": "VCID-fene-srh1-b3gp" }, { "vulnerability": "VCID-jr1y-txur-ebgr" }, { "vulnerability": "VCID-n5d6-9gwm-vkc7" }, { "vulnerability": "VCID-pg29-vrqh-pka8" }, { "vulnerability": "VCID-pgw2-3qy2-5ban" }, { "vulnerability": "VCID-pmwr-4j1v-s7gu" }, { "vulnerability": "VCID-ptwz-uax5-mqbq" }, { "vulnerability": "VCID-pvbx-j8j1-dkb3" }, { "vulnerability": "VCID-q45n-pmfj-f7ae" }, { "vulnerability": "VCID-r2b4-pdwz-ybae" }, { "vulnerability": "VCID-v2gf-rqxb-57ae" }, { "vulnerability": "VCID-vscd-6s2t-bucr" }, { "vulnerability": "VCID-xfz2-cwzt-tqhz" }, { "vulnerability": "VCID-y17q-5gas-jke9" }, { "vulnerability": "VCID-z8nt-w84w-tkew" }, { "vulnerability": "VCID-zcq4-z2c5-2ffr" }, { "vulnerability": "VCID-zrnp-ujpt-tbee" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.153-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921650?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.177-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.177-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2024-8905" ], "risk_score": 2.6, "exploitability": "0.5", "weighted_severity": "5.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-z3hb-eha9-27a9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/96388?format=api", "vulnerability_id": "VCID-zbu2-b7gs-xkhe", "summary": "Type Confusion in V8 in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-8904", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00294", "scoring_system": "epss", "scoring_elements": "0.52753", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00294", "scoring_system": "epss", "scoring_elements": "0.52782", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00294", "scoring_system": "epss", "scoring_elements": "0.52775", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00294", "scoring_system": "epss", "scoring_elements": "0.52737", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00294", "scoring_system": "epss", "scoring_elements": "0.52682", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00294", "scoring_system": "epss", "scoring_elements": "0.52709", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00294", "scoring_system": "epss", "scoring_elements": "0.52674", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00294", "scoring_system": "epss", "scoring_elements": "0.52725", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00294", "scoring_system": "epss", "scoring_elements": "0.52719", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00294", "scoring_system": "epss", "scoring_elements": "0.52769", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00302", "scoring_system": "epss", "scoring_elements": "0.53599", "published_at": "2026-04-21T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-8904" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8904", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8904" }, { "reference_url": "https://issues.chromium.org/issues/365376497", "reference_id": "365376497", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-18T15:40:22Z/" } ], "url": "https://issues.chromium.org/issues/365376497" }, { "reference_url": "https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop_17.html", "reference_id": "stable-channel-update-for-desktop_17.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-18T15:40:22Z/" } ], "url": "https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop_17.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/921728?format=api", "purl": "pkg:deb/debian/chromium@129.0.6668.58-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@129.0.6668.58-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921729?format=api", "purl": "pkg:deb/debian/chromium@129.0.6668.58-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@129.0.6668.58-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582091?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.153-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gbt-xkej-k7aw" }, { "vulnerability": "VCID-2s6k-knqz-s7bv" }, { "vulnerability": "VCID-32xu-tbuh-nfds" }, { "vulnerability": "VCID-5znj-k78s-suca" }, { "vulnerability": "VCID-6dub-gz8z-m3fk" }, { "vulnerability": "VCID-7gex-zf7d-5ka4" }, { "vulnerability": "VCID-88yy-dyf6-cue7" }, { "vulnerability": "VCID-8uaq-e8kp-87fs" }, { "vulnerability": "VCID-9p5u-1x3q-63dh" }, { "vulnerability": "VCID-9s6e-p69b-suep" }, { "vulnerability": "VCID-9sbp-bp4k-23cn" }, { "vulnerability": "VCID-ehkc-zgaa-23fy" }, { "vulnerability": "VCID-fene-srh1-b3gp" }, { "vulnerability": "VCID-jr1y-txur-ebgr" }, { "vulnerability": "VCID-n5d6-9gwm-vkc7" }, { "vulnerability": "VCID-pg29-vrqh-pka8" }, { "vulnerability": "VCID-pgw2-3qy2-5ban" }, { "vulnerability": "VCID-pmwr-4j1v-s7gu" }, { "vulnerability": "VCID-ptwz-uax5-mqbq" }, { "vulnerability": "VCID-pvbx-j8j1-dkb3" }, { "vulnerability": "VCID-q45n-pmfj-f7ae" }, { "vulnerability": "VCID-r2b4-pdwz-ybae" }, { "vulnerability": "VCID-v2gf-rqxb-57ae" }, { "vulnerability": "VCID-vscd-6s2t-bucr" }, { "vulnerability": "VCID-xfz2-cwzt-tqhz" }, { "vulnerability": "VCID-y17q-5gas-jke9" }, { "vulnerability": "VCID-z8nt-w84w-tkew" }, { "vulnerability": "VCID-zcq4-z2c5-2ffr" }, { "vulnerability": "VCID-zrnp-ujpt-tbee" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.153-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921650?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.177-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.177-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2024-8904" ], "risk_score": 2.6, "exploitability": "0.5", "weighted_severity": "5.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zbu2-b7gs-xkhe" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@129.0.6668.58-1~deb12u1%3Fdistro=trixie" }