Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/921790?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/921790?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.127-1~deb13u1?distro=trixie", "type": "deb", "namespace": "debian", "name": "chromium", "version": "139.0.7258.127-1~deb13u1", "qualifiers": { "distro": "trixie" }, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": "139.0.7258.127-1", "latest_non_vulnerable_version": "147.0.7727.55-1", "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/96951?format=api", "vulnerability_id": "VCID-1myc-2zvg-4ufz", "summary": "Inappropriate implementation in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-8581", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00042", "scoring_system": "epss", "scoring_elements": "0.1295", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00042", "scoring_system": "epss", "scoring_elements": "0.12998", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00042", "scoring_system": "epss", "scoring_elements": "0.12799", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00042", "scoring_system": "epss", "scoring_elements": "0.12878", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00042", "scoring_system": "epss", "scoring_elements": "0.12928", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00042", "scoring_system": "epss", "scoring_elements": "0.12892", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00046", "scoring_system": "epss", "scoring_elements": "0.14071", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00046", "scoring_system": "epss", "scoring_elements": "0.14017", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00046", "scoring_system": "epss", "scoring_elements": "0.13911", "published_at": "2026-04-16T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-8581" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8581", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8581" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/921788?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.66-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.66-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921789?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.66-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.66-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921790?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.127-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.127-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582091?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.153-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gbt-xkej-k7aw" }, { "vulnerability": "VCID-2s6k-knqz-s7bv" }, { "vulnerability": "VCID-32xu-tbuh-nfds" }, { "vulnerability": "VCID-5znj-k78s-suca" }, { "vulnerability": "VCID-6dub-gz8z-m3fk" }, { "vulnerability": "VCID-7gex-zf7d-5ka4" }, { "vulnerability": "VCID-88yy-dyf6-cue7" }, { "vulnerability": "VCID-8uaq-e8kp-87fs" }, { "vulnerability": "VCID-9p5u-1x3q-63dh" }, { "vulnerability": "VCID-9s6e-p69b-suep" }, { "vulnerability": "VCID-9sbp-bp4k-23cn" }, { "vulnerability": "VCID-ehkc-zgaa-23fy" }, { "vulnerability": "VCID-fene-srh1-b3gp" }, { "vulnerability": "VCID-jr1y-txur-ebgr" }, { "vulnerability": "VCID-n5d6-9gwm-vkc7" }, { "vulnerability": "VCID-pg29-vrqh-pka8" }, { "vulnerability": "VCID-pgw2-3qy2-5ban" }, { "vulnerability": "VCID-pmwr-4j1v-s7gu" }, { "vulnerability": "VCID-ptwz-uax5-mqbq" }, { "vulnerability": "VCID-pvbx-j8j1-dkb3" }, { "vulnerability": "VCID-q45n-pmfj-f7ae" }, { "vulnerability": "VCID-r2b4-pdwz-ybae" }, { "vulnerability": "VCID-v2gf-rqxb-57ae" }, { "vulnerability": "VCID-vscd-6s2t-bucr" }, { "vulnerability": "VCID-xfz2-cwzt-tqhz" }, { "vulnerability": "VCID-y17q-5gas-jke9" }, { "vulnerability": "VCID-z8nt-w84w-tkew" }, { "vulnerability": "VCID-zcq4-z2c5-2ffr" }, { "vulnerability": "VCID-zrnp-ujpt-tbee" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.153-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921650?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.177-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.177-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2025-8581" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1myc-2zvg-4ufz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/34513?format=api", "vulnerability_id": "VCID-8hq7-bca9-xkhw", "summary": "Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-8882", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00164", "scoring_system": "epss", "scoring_elements": "0.37457", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00164", "scoring_system": "epss", "scoring_elements": "0.37472", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00164", "scoring_system": "epss", "scoring_elements": "0.37437", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00164", "scoring_system": "epss", "scoring_elements": "0.3741", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00164", "scoring_system": "epss", "scoring_elements": "0.37543", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00164", "scoring_system": "epss", "scoring_elements": "0.37566", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00164", "scoring_system": "epss", "scoring_elements": "0.37394", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00164", "scoring_system": "epss", "scoring_elements": "0.37446", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00164", "scoring_system": "epss", "scoring_elements": "0.37458", "published_at": "2026-04-09T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-8882" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8882", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8882" }, { "reference_url": "https://issues.chromium.org/issues/435623339", "reference_id": "435623339", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-14T03:55:13Z/" } ], "url": "https://issues.chromium.org/issues/435623339" }, { "reference_url": "https://security.gentoo.org/glsa/202511-04", "reference_id": "GLSA-202511-04", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202511-04" }, { "reference_url": "https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop_12.html", "reference_id": "stable-channel-update-for-desktop_12.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-14T03:55:13Z/" } ], "url": "https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop_12.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/921830?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.127-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.127-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921790?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.127-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.127-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921831?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.127-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.127-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582091?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.153-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gbt-xkej-k7aw" }, { "vulnerability": "VCID-2s6k-knqz-s7bv" }, { "vulnerability": "VCID-32xu-tbuh-nfds" }, { "vulnerability": "VCID-5znj-k78s-suca" }, { "vulnerability": "VCID-6dub-gz8z-m3fk" }, { "vulnerability": "VCID-7gex-zf7d-5ka4" }, { "vulnerability": "VCID-88yy-dyf6-cue7" }, { "vulnerability": "VCID-8uaq-e8kp-87fs" }, { "vulnerability": "VCID-9p5u-1x3q-63dh" }, { "vulnerability": "VCID-9s6e-p69b-suep" }, { "vulnerability": "VCID-9sbp-bp4k-23cn" }, { "vulnerability": "VCID-ehkc-zgaa-23fy" }, { "vulnerability": "VCID-fene-srh1-b3gp" }, { "vulnerability": "VCID-jr1y-txur-ebgr" }, { "vulnerability": "VCID-n5d6-9gwm-vkc7" }, { "vulnerability": "VCID-pg29-vrqh-pka8" }, { "vulnerability": "VCID-pgw2-3qy2-5ban" }, { "vulnerability": "VCID-pmwr-4j1v-s7gu" }, { "vulnerability": "VCID-ptwz-uax5-mqbq" }, { "vulnerability": "VCID-pvbx-j8j1-dkb3" }, { "vulnerability": "VCID-q45n-pmfj-f7ae" }, { "vulnerability": "VCID-r2b4-pdwz-ybae" }, { "vulnerability": "VCID-v2gf-rqxb-57ae" }, { "vulnerability": "VCID-vscd-6s2t-bucr" }, { "vulnerability": "VCID-xfz2-cwzt-tqhz" }, { "vulnerability": "VCID-y17q-5gas-jke9" }, { "vulnerability": "VCID-z8nt-w84w-tkew" }, { "vulnerability": "VCID-zcq4-z2c5-2ffr" }, { "vulnerability": "VCID-zrnp-ujpt-tbee" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.153-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921650?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.177-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.177-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2025-8882" ], "risk_score": 2.6, "exploitability": "0.5", "weighted_severity": "5.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-8hq7-bca9-xkhw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/96947?format=api", "vulnerability_id": "VCID-9uq1-attd-6fg9", "summary": "Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-8577", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00053", "scoring_system": "epss", "scoring_elements": "0.16748", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00053", "scoring_system": "epss", "scoring_elements": "0.16808", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00053", "scoring_system": "epss", "scoring_elements": "0.16595", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00053", "scoring_system": "epss", "scoring_elements": "0.1668", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00053", "scoring_system": "epss", "scoring_elements": "0.16734", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00053", "scoring_system": "epss", "scoring_elements": "0.16714", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00058", "scoring_system": "epss", "scoring_elements": "0.18069", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00058", "scoring_system": "epss", "scoring_elements": "0.18019", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00058", "scoring_system": "epss", "scoring_elements": "0.17961", "published_at": "2026-04-16T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-8577" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8577", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8577" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/921788?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.66-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.66-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921789?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.66-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.66-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921790?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.127-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.127-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582091?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.153-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gbt-xkej-k7aw" }, { "vulnerability": "VCID-2s6k-knqz-s7bv" }, { "vulnerability": "VCID-32xu-tbuh-nfds" }, { "vulnerability": "VCID-5znj-k78s-suca" }, { "vulnerability": "VCID-6dub-gz8z-m3fk" }, { "vulnerability": "VCID-7gex-zf7d-5ka4" }, { "vulnerability": "VCID-88yy-dyf6-cue7" }, { "vulnerability": "VCID-8uaq-e8kp-87fs" }, { "vulnerability": "VCID-9p5u-1x3q-63dh" }, { "vulnerability": "VCID-9s6e-p69b-suep" }, { "vulnerability": "VCID-9sbp-bp4k-23cn" }, { "vulnerability": "VCID-ehkc-zgaa-23fy" }, { "vulnerability": "VCID-fene-srh1-b3gp" }, { "vulnerability": "VCID-jr1y-txur-ebgr" }, { "vulnerability": "VCID-n5d6-9gwm-vkc7" }, { "vulnerability": "VCID-pg29-vrqh-pka8" }, { "vulnerability": "VCID-pgw2-3qy2-5ban" }, { "vulnerability": "VCID-pmwr-4j1v-s7gu" }, { "vulnerability": "VCID-ptwz-uax5-mqbq" }, { "vulnerability": "VCID-pvbx-j8j1-dkb3" }, { "vulnerability": "VCID-q45n-pmfj-f7ae" }, { "vulnerability": "VCID-r2b4-pdwz-ybae" }, { "vulnerability": "VCID-v2gf-rqxb-57ae" }, { "vulnerability": "VCID-vscd-6s2t-bucr" }, { "vulnerability": "VCID-xfz2-cwzt-tqhz" }, { "vulnerability": "VCID-y17q-5gas-jke9" }, { "vulnerability": "VCID-z8nt-w84w-tkew" }, { "vulnerability": "VCID-zcq4-z2c5-2ffr" }, { "vulnerability": "VCID-zrnp-ujpt-tbee" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.153-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921650?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.177-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.177-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2025-8577" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9uq1-attd-6fg9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/34512?format=api", "vulnerability_id": "VCID-chwf-3ees-vucx", "summary": "Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-8881", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00023", "scoring_system": "epss", "scoring_elements": "0.06192", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00023", "scoring_system": "epss", "scoring_elements": "0.06249", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00023", "scoring_system": "epss", "scoring_elements": "0.06244", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00023", "scoring_system": "epss", "scoring_elements": "0.06234", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00023", "scoring_system": "epss", "scoring_elements": "0.06164", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00023", "scoring_system": "epss", "scoring_elements": "0.06195", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00023", "scoring_system": "epss", "scoring_elements": "0.06177", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00023", "scoring_system": "epss", "scoring_elements": "0.0622", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00023", "scoring_system": "epss", "scoring_elements": "0.06258", "published_at": "2026-04-09T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-8881" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8881", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8881" }, { "reference_url": "https://issues.chromium.org/issues/433800617", "reference_id": "433800617", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-08-13T18:37:55Z/" } ], "url": "https://issues.chromium.org/issues/433800617" }, { "reference_url": "https://security.gentoo.org/glsa/202511-04", "reference_id": "GLSA-202511-04", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202511-04" }, { "reference_url": "https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop_12.html", "reference_id": "stable-channel-update-for-desktop_12.html", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-08-13T18:37:55Z/" } ], "url": "https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop_12.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/921830?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.127-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.127-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921790?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.127-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.127-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921831?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.127-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.127-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582091?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.153-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gbt-xkej-k7aw" }, { "vulnerability": "VCID-2s6k-knqz-s7bv" }, { "vulnerability": "VCID-32xu-tbuh-nfds" }, { "vulnerability": "VCID-5znj-k78s-suca" }, { "vulnerability": "VCID-6dub-gz8z-m3fk" }, { "vulnerability": "VCID-7gex-zf7d-5ka4" }, { "vulnerability": "VCID-88yy-dyf6-cue7" }, { "vulnerability": "VCID-8uaq-e8kp-87fs" }, { "vulnerability": "VCID-9p5u-1x3q-63dh" }, { "vulnerability": "VCID-9s6e-p69b-suep" }, { "vulnerability": "VCID-9sbp-bp4k-23cn" }, { "vulnerability": "VCID-ehkc-zgaa-23fy" }, { "vulnerability": "VCID-fene-srh1-b3gp" }, { "vulnerability": "VCID-jr1y-txur-ebgr" }, { "vulnerability": "VCID-n5d6-9gwm-vkc7" }, { "vulnerability": "VCID-pg29-vrqh-pka8" }, { "vulnerability": "VCID-pgw2-3qy2-5ban" }, { "vulnerability": "VCID-pmwr-4j1v-s7gu" }, { "vulnerability": "VCID-ptwz-uax5-mqbq" }, { "vulnerability": "VCID-pvbx-j8j1-dkb3" }, { "vulnerability": "VCID-q45n-pmfj-f7ae" }, { "vulnerability": "VCID-r2b4-pdwz-ybae" }, { "vulnerability": "VCID-v2gf-rqxb-57ae" }, { "vulnerability": "VCID-vscd-6s2t-bucr" }, { "vulnerability": "VCID-xfz2-cwzt-tqhz" }, { "vulnerability": "VCID-y17q-5gas-jke9" }, { "vulnerability": "VCID-z8nt-w84w-tkew" }, { "vulnerability": "VCID-zcq4-z2c5-2ffr" }, { "vulnerability": "VCID-zrnp-ujpt-tbee" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.153-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921650?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.177-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.177-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2025-8881" ], "risk_score": 1.9, "exploitability": "0.5", "weighted_severity": "3.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-chwf-3ees-vucx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/96953?format=api", "vulnerability_id": "VCID-cwab-m23u-n7at", "summary": "Inappropriate implementation in Permissions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-8583", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00046", "scoring_system": "epss", "scoring_elements": "0.14093", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00046", "scoring_system": "epss", "scoring_elements": "0.14148", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00046", "scoring_system": "epss", "scoring_elements": "0.13956", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00046", "scoring_system": "epss", "scoring_elements": "0.14038", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00046", "scoring_system": "epss", "scoring_elements": "0.14091", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00046", "scoring_system": "epss", "scoring_elements": "0.14035", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00049", "scoring_system": "epss", "scoring_elements": "0.15275", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00049", "scoring_system": "epss", "scoring_elements": "0.1534", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00049", "scoring_system": "epss", "scoring_elements": "0.15189", "published_at": "2026-04-16T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-8583" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8583", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8583" }, { "reference_url": "https://issues.chromium.org/issues/373794472", "reference_id": "373794472", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-08-07T13:18:15Z/" } ], "url": "https://issues.chromium.org/issues/373794472" }, { "reference_url": "https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-08-07T13:18:15Z/" } ], "url": "https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/921788?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.66-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.66-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921789?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.66-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.66-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921790?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.127-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.127-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582091?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.153-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gbt-xkej-k7aw" }, { "vulnerability": "VCID-2s6k-knqz-s7bv" }, { "vulnerability": "VCID-32xu-tbuh-nfds" }, { "vulnerability": "VCID-5znj-k78s-suca" }, { "vulnerability": "VCID-6dub-gz8z-m3fk" }, { "vulnerability": "VCID-7gex-zf7d-5ka4" }, { "vulnerability": "VCID-88yy-dyf6-cue7" }, { "vulnerability": "VCID-8uaq-e8kp-87fs" }, { "vulnerability": "VCID-9p5u-1x3q-63dh" }, { "vulnerability": "VCID-9s6e-p69b-suep" }, { "vulnerability": "VCID-9sbp-bp4k-23cn" }, { "vulnerability": "VCID-ehkc-zgaa-23fy" }, { "vulnerability": "VCID-fene-srh1-b3gp" }, { "vulnerability": "VCID-jr1y-txur-ebgr" }, { "vulnerability": "VCID-n5d6-9gwm-vkc7" }, { "vulnerability": "VCID-pg29-vrqh-pka8" }, { "vulnerability": "VCID-pgw2-3qy2-5ban" }, { "vulnerability": "VCID-pmwr-4j1v-s7gu" }, { "vulnerability": "VCID-ptwz-uax5-mqbq" }, { "vulnerability": "VCID-pvbx-j8j1-dkb3" }, { "vulnerability": "VCID-q45n-pmfj-f7ae" }, { "vulnerability": "VCID-r2b4-pdwz-ybae" }, { "vulnerability": "VCID-v2gf-rqxb-57ae" }, { "vulnerability": "VCID-vscd-6s2t-bucr" }, { "vulnerability": "VCID-xfz2-cwzt-tqhz" }, { "vulnerability": "VCID-y17q-5gas-jke9" }, { "vulnerability": "VCID-z8nt-w84w-tkew" }, { "vulnerability": "VCID-zcq4-z2c5-2ffr" }, { "vulnerability": "VCID-zrnp-ujpt-tbee" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.153-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921650?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.177-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.177-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2025-8583" ], "risk_score": 1.3, "exploitability": "0.5", "weighted_severity": "2.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-cwab-m23u-n7at" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/96946?format=api", "vulnerability_id": "VCID-es45-v7v3-gkcy", "summary": "Use after free in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: Medium)", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-8576", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00195", "scoring_system": "epss", "scoring_elements": "0.41433", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00195", "scoring_system": "epss", "scoring_elements": "0.41462", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00195", "scoring_system": "epss", "scoring_elements": "0.41389", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00195", "scoring_system": "epss", "scoring_elements": "0.41439", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00195", "scoring_system": "epss", "scoring_elements": "0.41448", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00195", "scoring_system": "epss", "scoring_elements": "0.41468", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00214", "scoring_system": "epss", "scoring_elements": "0.43886", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00214", "scoring_system": "epss", "scoring_elements": "0.43902", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00214", "scoring_system": "epss", "scoring_elements": "0.43948", "published_at": "2026-04-16T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-8576" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8576", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8576" }, { "reference_url": "https://issues.chromium.org/issues/414760982", "reference_id": "414760982", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-07T13:39:48Z/" } ], "url": "https://issues.chromium.org/issues/414760982" }, { "reference_url": "https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-07T13:39:48Z/" } ], "url": "https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/921788?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.66-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.66-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921789?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.66-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.66-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921790?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.127-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.127-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582091?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.153-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gbt-xkej-k7aw" }, { "vulnerability": "VCID-2s6k-knqz-s7bv" }, { "vulnerability": "VCID-32xu-tbuh-nfds" }, { "vulnerability": "VCID-5znj-k78s-suca" }, { "vulnerability": "VCID-6dub-gz8z-m3fk" }, { "vulnerability": "VCID-7gex-zf7d-5ka4" }, { "vulnerability": "VCID-88yy-dyf6-cue7" }, { "vulnerability": "VCID-8uaq-e8kp-87fs" }, { "vulnerability": "VCID-9p5u-1x3q-63dh" }, { "vulnerability": "VCID-9s6e-p69b-suep" }, { "vulnerability": "VCID-9sbp-bp4k-23cn" }, { "vulnerability": "VCID-ehkc-zgaa-23fy" }, { "vulnerability": "VCID-fene-srh1-b3gp" }, { "vulnerability": "VCID-jr1y-txur-ebgr" }, { "vulnerability": "VCID-n5d6-9gwm-vkc7" }, { "vulnerability": "VCID-pg29-vrqh-pka8" }, { "vulnerability": "VCID-pgw2-3qy2-5ban" }, { "vulnerability": "VCID-pmwr-4j1v-s7gu" }, { "vulnerability": "VCID-ptwz-uax5-mqbq" }, { "vulnerability": "VCID-pvbx-j8j1-dkb3" }, { "vulnerability": "VCID-q45n-pmfj-f7ae" }, { "vulnerability": "VCID-r2b4-pdwz-ybae" }, { "vulnerability": "VCID-v2gf-rqxb-57ae" }, { "vulnerability": "VCID-vscd-6s2t-bucr" }, { "vulnerability": "VCID-xfz2-cwzt-tqhz" }, { "vulnerability": "VCID-y17q-5gas-jke9" }, { "vulnerability": "VCID-z8nt-w84w-tkew" }, { "vulnerability": "VCID-zcq4-z2c5-2ffr" }, { "vulnerability": "VCID-zrnp-ujpt-tbee" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.153-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921650?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.177-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.177-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2025-8576" ], "risk_score": 2.6, "exploitability": "0.5", "weighted_severity": "5.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-es45-v7v3-gkcy" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/34511?format=api", "vulnerability_id": "VCID-gj24-r1kr-1qg7", "summary": "Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-8880", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00124", "scoring_system": "epss", "scoring_elements": "0.31631", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00124", "scoring_system": "epss", "scoring_elements": "0.31674", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00124", "scoring_system": "epss", "scoring_elements": "0.31633", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00124", "scoring_system": "epss", "scoring_elements": "0.31597", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00124", "scoring_system": "epss", "scoring_elements": "0.31725", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00124", "scoring_system": "epss", "scoring_elements": "0.3177", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00124", "scoring_system": "epss", "scoring_elements": "0.31588", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00124", "scoring_system": "epss", "scoring_elements": "0.3164", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00124", "scoring_system": "epss", "scoring_elements": "0.3167", "published_at": "2026-04-09T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-8880" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8880", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8880" }, { "reference_url": "https://issues.chromium.org/issues/433533359", "reference_id": "433533359", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-14T03:55:31Z/" } ], "url": "https://issues.chromium.org/issues/433533359" }, { "reference_url": "https://security.gentoo.org/glsa/202511-04", "reference_id": "GLSA-202511-04", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202511-04" }, { "reference_url": "https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop_12.html", "reference_id": "stable-channel-update-for-desktop_12.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-14T03:55:31Z/" } ], "url": "https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop_12.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/921830?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.127-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.127-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921790?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.127-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.127-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921831?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.127-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.127-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582091?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.153-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gbt-xkej-k7aw" }, { "vulnerability": "VCID-2s6k-knqz-s7bv" }, { "vulnerability": "VCID-32xu-tbuh-nfds" }, { "vulnerability": "VCID-5znj-k78s-suca" }, { "vulnerability": "VCID-6dub-gz8z-m3fk" }, { "vulnerability": "VCID-7gex-zf7d-5ka4" }, { "vulnerability": "VCID-88yy-dyf6-cue7" }, { "vulnerability": "VCID-8uaq-e8kp-87fs" }, { "vulnerability": "VCID-9p5u-1x3q-63dh" }, { "vulnerability": "VCID-9s6e-p69b-suep" }, { "vulnerability": "VCID-9sbp-bp4k-23cn" }, { "vulnerability": "VCID-ehkc-zgaa-23fy" }, { "vulnerability": "VCID-fene-srh1-b3gp" }, { "vulnerability": "VCID-jr1y-txur-ebgr" }, { "vulnerability": "VCID-n5d6-9gwm-vkc7" }, { "vulnerability": "VCID-pg29-vrqh-pka8" }, { "vulnerability": "VCID-pgw2-3qy2-5ban" }, { "vulnerability": "VCID-pmwr-4j1v-s7gu" }, { "vulnerability": "VCID-ptwz-uax5-mqbq" }, { "vulnerability": "VCID-pvbx-j8j1-dkb3" }, { "vulnerability": "VCID-q45n-pmfj-f7ae" }, { "vulnerability": "VCID-r2b4-pdwz-ybae" }, { "vulnerability": "VCID-v2gf-rqxb-57ae" }, { "vulnerability": "VCID-vscd-6s2t-bucr" }, { "vulnerability": "VCID-xfz2-cwzt-tqhz" }, { "vulnerability": "VCID-y17q-5gas-jke9" }, { "vulnerability": "VCID-z8nt-w84w-tkew" }, { "vulnerability": "VCID-zcq4-z2c5-2ffr" }, { "vulnerability": "VCID-zrnp-ujpt-tbee" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.153-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921650?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.177-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.177-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2025-8880" ], "risk_score": 2.6, "exploitability": "0.5", "weighted_severity": "5.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-gj24-r1kr-1qg7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/96949?format=api", "vulnerability_id": "VCID-k57k-h41e-hbay", "summary": "Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-8579", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00053", "scoring_system": "epss", "scoring_elements": "0.16748", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00053", "scoring_system": "epss", "scoring_elements": "0.16808", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00053", "scoring_system": "epss", "scoring_elements": "0.16595", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00053", "scoring_system": "epss", "scoring_elements": "0.1668", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00053", "scoring_system": "epss", "scoring_elements": "0.16734", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00053", "scoring_system": "epss", "scoring_elements": "0.16714", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00058", "scoring_system": "epss", "scoring_elements": "0.18019", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00058", "scoring_system": "epss", "scoring_elements": "0.18069", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00058", "scoring_system": "epss", "scoring_elements": "0.17961", "published_at": "2026-04-16T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-8579" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8579", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8579" }, { "reference_url": "https://issues.chromium.org/issues/407791462", "reference_id": "407791462", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-08-07T13:31:51Z/" } ], "url": "https://issues.chromium.org/issues/407791462" }, { "reference_url": "https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-08-07T13:31:51Z/" } ], "url": "https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/921788?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.66-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.66-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921789?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.66-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.66-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921790?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.127-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.127-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582091?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.153-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gbt-xkej-k7aw" }, { "vulnerability": "VCID-2s6k-knqz-s7bv" }, { "vulnerability": "VCID-32xu-tbuh-nfds" }, { "vulnerability": "VCID-5znj-k78s-suca" }, { "vulnerability": "VCID-6dub-gz8z-m3fk" }, { "vulnerability": "VCID-7gex-zf7d-5ka4" }, { "vulnerability": "VCID-88yy-dyf6-cue7" }, { "vulnerability": "VCID-8uaq-e8kp-87fs" }, { "vulnerability": "VCID-9p5u-1x3q-63dh" }, { "vulnerability": "VCID-9s6e-p69b-suep" }, { "vulnerability": "VCID-9sbp-bp4k-23cn" }, { "vulnerability": "VCID-ehkc-zgaa-23fy" }, { "vulnerability": "VCID-fene-srh1-b3gp" }, { "vulnerability": "VCID-jr1y-txur-ebgr" }, { "vulnerability": "VCID-n5d6-9gwm-vkc7" }, { "vulnerability": "VCID-pg29-vrqh-pka8" }, { "vulnerability": "VCID-pgw2-3qy2-5ban" }, { "vulnerability": "VCID-pmwr-4j1v-s7gu" }, { "vulnerability": "VCID-ptwz-uax5-mqbq" }, { "vulnerability": "VCID-pvbx-j8j1-dkb3" }, { "vulnerability": "VCID-q45n-pmfj-f7ae" }, { "vulnerability": "VCID-r2b4-pdwz-ybae" }, { "vulnerability": "VCID-v2gf-rqxb-57ae" }, { "vulnerability": "VCID-vscd-6s2t-bucr" }, { "vulnerability": "VCID-xfz2-cwzt-tqhz" }, { "vulnerability": "VCID-y17q-5gas-jke9" }, { "vulnerability": "VCID-z8nt-w84w-tkew" }, { "vulnerability": "VCID-zcq4-z2c5-2ffr" }, { "vulnerability": "VCID-zrnp-ujpt-tbee" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.153-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921650?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.177-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.177-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2025-8579" ], "risk_score": 1.3, "exploitability": "0.5", "weighted_severity": "2.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-k57k-h41e-hbay" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/96948?format=api", "vulnerability_id": "VCID-ke3x-ajgw-s3av", "summary": "Use after free in Cast in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-8578", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00195", "scoring_system": "epss", "scoring_elements": "0.41433", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00195", "scoring_system": "epss", "scoring_elements": "0.41462", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00195", "scoring_system": "epss", "scoring_elements": "0.41389", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00195", "scoring_system": "epss", "scoring_elements": "0.41439", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00195", "scoring_system": "epss", "scoring_elements": "0.41448", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00195", "scoring_system": "epss", "scoring_elements": "0.41468", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00214", "scoring_system": "epss", "scoring_elements": "0.43886", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00214", "scoring_system": "epss", "scoring_elements": "0.43902", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00214", "scoring_system": "epss", "scoring_elements": "0.43948", "published_at": "2026-04-16T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-8578" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8578", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8578" }, { "reference_url": "https://issues.chromium.org/issues/423387026", "reference_id": "423387026", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-07T13:33:35Z/" } ], "url": "https://issues.chromium.org/issues/423387026" }, { "reference_url": "https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-07T13:33:35Z/" } ], "url": "https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/921788?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.66-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.66-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921789?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.66-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.66-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921790?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.127-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.127-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582091?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.153-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gbt-xkej-k7aw" }, { "vulnerability": "VCID-2s6k-knqz-s7bv" }, { "vulnerability": "VCID-32xu-tbuh-nfds" }, { "vulnerability": "VCID-5znj-k78s-suca" }, { "vulnerability": "VCID-6dub-gz8z-m3fk" }, { "vulnerability": "VCID-7gex-zf7d-5ka4" }, { "vulnerability": "VCID-88yy-dyf6-cue7" }, { "vulnerability": "VCID-8uaq-e8kp-87fs" }, { "vulnerability": "VCID-9p5u-1x3q-63dh" }, { "vulnerability": "VCID-9s6e-p69b-suep" }, { "vulnerability": "VCID-9sbp-bp4k-23cn" }, { "vulnerability": "VCID-ehkc-zgaa-23fy" }, { "vulnerability": "VCID-fene-srh1-b3gp" }, { "vulnerability": "VCID-jr1y-txur-ebgr" }, { "vulnerability": "VCID-n5d6-9gwm-vkc7" }, { "vulnerability": "VCID-pg29-vrqh-pka8" }, { "vulnerability": "VCID-pgw2-3qy2-5ban" }, { "vulnerability": "VCID-pmwr-4j1v-s7gu" }, { "vulnerability": "VCID-ptwz-uax5-mqbq" }, { "vulnerability": "VCID-pvbx-j8j1-dkb3" }, { "vulnerability": "VCID-q45n-pmfj-f7ae" }, { "vulnerability": "VCID-r2b4-pdwz-ybae" }, { "vulnerability": "VCID-v2gf-rqxb-57ae" }, { "vulnerability": "VCID-vscd-6s2t-bucr" }, { "vulnerability": "VCID-xfz2-cwzt-tqhz" }, { "vulnerability": "VCID-y17q-5gas-jke9" }, { "vulnerability": "VCID-z8nt-w84w-tkew" }, { "vulnerability": "VCID-zcq4-z2c5-2ffr" }, { "vulnerability": "VCID-zrnp-ujpt-tbee" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.153-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921650?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.177-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.177-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2025-8578" ], "risk_score": 2.6, "exploitability": "0.5", "weighted_severity": "5.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ke3x-ajgw-s3av" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/34514?format=api", "vulnerability_id": "VCID-qff9-euj8-u7f4", "summary": "Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-8901", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23471", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.2355", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23509", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23455", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23597", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23634", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23413", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23484", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23533", "published_at": "2026-04-09T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-8901" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8901", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8901" }, { "reference_url": "https://issues.chromium.org/issues/435139154", "reference_id": "435139154", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-13T18:38:41Z/" } ], "url": "https://issues.chromium.org/issues/435139154" }, { "reference_url": "https://security.gentoo.org/glsa/202511-04", "reference_id": "GLSA-202511-04", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202511-04" }, { "reference_url": "https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop_12.html", "reference_id": "stable-channel-update-for-desktop_12.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-13T18:38:41Z/" } ], "url": "https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop_12.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/921830?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.127-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.127-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921790?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.127-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.127-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921831?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.127-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.127-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582091?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.153-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gbt-xkej-k7aw" }, { "vulnerability": "VCID-2s6k-knqz-s7bv" }, { "vulnerability": "VCID-32xu-tbuh-nfds" }, { "vulnerability": "VCID-5znj-k78s-suca" }, { "vulnerability": "VCID-6dub-gz8z-m3fk" }, { "vulnerability": "VCID-7gex-zf7d-5ka4" }, { "vulnerability": "VCID-88yy-dyf6-cue7" }, { "vulnerability": "VCID-8uaq-e8kp-87fs" }, { "vulnerability": "VCID-9p5u-1x3q-63dh" }, { "vulnerability": "VCID-9s6e-p69b-suep" }, { "vulnerability": "VCID-9sbp-bp4k-23cn" }, { "vulnerability": "VCID-ehkc-zgaa-23fy" }, { "vulnerability": "VCID-fene-srh1-b3gp" }, { "vulnerability": "VCID-jr1y-txur-ebgr" }, { "vulnerability": "VCID-n5d6-9gwm-vkc7" }, { "vulnerability": "VCID-pg29-vrqh-pka8" }, { "vulnerability": "VCID-pgw2-3qy2-5ban" }, { "vulnerability": "VCID-pmwr-4j1v-s7gu" }, { "vulnerability": "VCID-ptwz-uax5-mqbq" }, { "vulnerability": "VCID-pvbx-j8j1-dkb3" }, { "vulnerability": "VCID-q45n-pmfj-f7ae" }, { "vulnerability": "VCID-r2b4-pdwz-ybae" }, { "vulnerability": "VCID-v2gf-rqxb-57ae" }, { "vulnerability": "VCID-vscd-6s2t-bucr" }, { "vulnerability": "VCID-xfz2-cwzt-tqhz" }, { "vulnerability": "VCID-y17q-5gas-jke9" }, { "vulnerability": "VCID-z8nt-w84w-tkew" }, { "vulnerability": "VCID-zcq4-z2c5-2ffr" }, { "vulnerability": "VCID-zrnp-ujpt-tbee" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.153-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921650?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.177-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.177-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2025-8901" ], "risk_score": 2.6, "exploitability": "0.5", "weighted_severity": "5.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qff9-euj8-u7f4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/96950?format=api", "vulnerability_id": "VCID-qzrp-z4g2-yyhp", "summary": "Inappropriate implementation in Filesystems in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-8580", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00053", "scoring_system": "epss", "scoring_elements": "0.16748", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00053", "scoring_system": "epss", "scoring_elements": "0.16808", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00053", "scoring_system": "epss", "scoring_elements": "0.16595", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00053", "scoring_system": "epss", "scoring_elements": "0.1668", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00053", "scoring_system": "epss", "scoring_elements": "0.16734", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00053", "scoring_system": "epss", "scoring_elements": "0.16714", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00058", "scoring_system": "epss", "scoring_elements": "0.18019", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00058", "scoring_system": "epss", "scoring_elements": "0.18069", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00058", "scoring_system": "epss", "scoring_elements": "0.17961", "published_at": "2026-04-16T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-8580" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8580", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8580" }, { "reference_url": "https://issues.chromium.org/issues/411544197", "reference_id": "411544197", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-08-07T13:30:08Z/" } ], "url": "https://issues.chromium.org/issues/411544197" }, { "reference_url": "https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-08-07T13:30:08Z/" } ], "url": "https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/921788?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.66-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.66-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921789?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.66-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.66-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921790?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.127-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.127-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582091?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.153-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gbt-xkej-k7aw" }, { "vulnerability": "VCID-2s6k-knqz-s7bv" }, { "vulnerability": "VCID-32xu-tbuh-nfds" }, { "vulnerability": "VCID-5znj-k78s-suca" }, { "vulnerability": "VCID-6dub-gz8z-m3fk" }, { "vulnerability": "VCID-7gex-zf7d-5ka4" }, { "vulnerability": "VCID-88yy-dyf6-cue7" }, { "vulnerability": "VCID-8uaq-e8kp-87fs" }, { "vulnerability": "VCID-9p5u-1x3q-63dh" }, { "vulnerability": "VCID-9s6e-p69b-suep" }, { "vulnerability": "VCID-9sbp-bp4k-23cn" }, { "vulnerability": "VCID-ehkc-zgaa-23fy" }, { "vulnerability": "VCID-fene-srh1-b3gp" }, { "vulnerability": "VCID-jr1y-txur-ebgr" }, { "vulnerability": "VCID-n5d6-9gwm-vkc7" }, { "vulnerability": "VCID-pg29-vrqh-pka8" }, { "vulnerability": "VCID-pgw2-3qy2-5ban" }, { "vulnerability": "VCID-pmwr-4j1v-s7gu" }, { "vulnerability": "VCID-ptwz-uax5-mqbq" }, { "vulnerability": "VCID-pvbx-j8j1-dkb3" }, { "vulnerability": "VCID-q45n-pmfj-f7ae" }, { "vulnerability": "VCID-r2b4-pdwz-ybae" }, { "vulnerability": "VCID-v2gf-rqxb-57ae" }, { "vulnerability": "VCID-vscd-6s2t-bucr" }, { "vulnerability": "VCID-xfz2-cwzt-tqhz" }, { "vulnerability": "VCID-y17q-5gas-jke9" }, { "vulnerability": "VCID-z8nt-w84w-tkew" }, { "vulnerability": "VCID-zcq4-z2c5-2ffr" }, { "vulnerability": "VCID-zrnp-ujpt-tbee" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.153-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921650?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.177-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.177-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2025-8580" ], "risk_score": 1.3, "exploitability": "0.5", "weighted_severity": "2.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qzrp-z4g2-yyhp" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/96952?format=api", "vulnerability_id": "VCID-tfc2-749m-sqh1", "summary": "Insufficient validation of untrusted input in Core in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low)", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-8582", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00062", "scoring_system": "epss", "scoring_elements": "0.19426", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00062", "scoring_system": "epss", "scoring_elements": "0.19474", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00062", "scoring_system": "epss", "scoring_elements": "0.19192", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00062", "scoring_system": "epss", "scoring_elements": "0.1927", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00062", "scoring_system": "epss", "scoring_elements": "0.19322", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00062", "scoring_system": "epss", "scoring_elements": "0.19327", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00067", "scoring_system": "epss", "scoring_elements": "0.207", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00067", "scoring_system": "epss", "scoring_elements": "0.20751", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00067", "scoring_system": "epss", "scoring_elements": "0.2069", "published_at": "2026-04-16T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-8582" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8582", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8582" }, { "reference_url": "https://issues.chromium.org/issues/40089450", "reference_id": "40089450", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-08-07T13:24:17Z/" } ], "url": "https://issues.chromium.org/issues/40089450" }, { "reference_url": "https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-08-07T13:24:17Z/" } ], "url": "https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/921788?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.66-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.66-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921789?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.66-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.66-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921790?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.127-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.127-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582091?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.153-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gbt-xkej-k7aw" }, { "vulnerability": "VCID-2s6k-knqz-s7bv" }, { "vulnerability": "VCID-32xu-tbuh-nfds" }, { "vulnerability": "VCID-5znj-k78s-suca" }, { "vulnerability": "VCID-6dub-gz8z-m3fk" }, { "vulnerability": "VCID-7gex-zf7d-5ka4" }, { "vulnerability": "VCID-88yy-dyf6-cue7" }, { "vulnerability": "VCID-8uaq-e8kp-87fs" }, { "vulnerability": "VCID-9p5u-1x3q-63dh" }, { "vulnerability": "VCID-9s6e-p69b-suep" }, { "vulnerability": "VCID-9sbp-bp4k-23cn" }, { "vulnerability": "VCID-ehkc-zgaa-23fy" }, { "vulnerability": "VCID-fene-srh1-b3gp" }, { "vulnerability": "VCID-jr1y-txur-ebgr" }, { "vulnerability": "VCID-n5d6-9gwm-vkc7" }, { "vulnerability": "VCID-pg29-vrqh-pka8" }, { "vulnerability": "VCID-pgw2-3qy2-5ban" }, { "vulnerability": "VCID-pmwr-4j1v-s7gu" }, { "vulnerability": "VCID-ptwz-uax5-mqbq" }, { "vulnerability": "VCID-pvbx-j8j1-dkb3" }, { "vulnerability": "VCID-q45n-pmfj-f7ae" }, { "vulnerability": "VCID-r2b4-pdwz-ybae" }, { "vulnerability": "VCID-v2gf-rqxb-57ae" }, { "vulnerability": "VCID-vscd-6s2t-bucr" }, { "vulnerability": "VCID-xfz2-cwzt-tqhz" }, { "vulnerability": "VCID-y17q-5gas-jke9" }, { "vulnerability": "VCID-z8nt-w84w-tkew" }, { "vulnerability": "VCID-zcq4-z2c5-2ffr" }, { "vulnerability": "VCID-zrnp-ujpt-tbee" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.153-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921650?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.177-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.177-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2025-8582" ], "risk_score": 1.3, "exploitability": "0.5", "weighted_severity": "2.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-tfc2-749m-sqh1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/66393?format=api", "vulnerability_id": "VCID-tkvr-d1xj-ykar", "summary": "chromium-browser: Side-channel information leakage in Navigation and Loading", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-13992.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-13992.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-13992", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00029", "scoring_system": "epss", "scoring_elements": "0.08199", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00039", "scoring_system": "epss", "scoring_elements": "0.11519", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00039", "scoring_system": "epss", "scoring_elements": "0.11713", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00039", "scoring_system": "epss", "scoring_elements": "0.11724", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00039", "scoring_system": "epss", "scoring_elements": "0.11687", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00039", "scoring_system": "epss", "scoring_elements": "0.11662", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00039", "scoring_system": "epss", "scoring_elements": "0.1179", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00039", "scoring_system": "epss", "scoring_elements": "0.11573", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00039", "scoring_system": "epss", "scoring_elements": "0.11658", "published_at": "2026-04-08T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-13992" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13992", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13992" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418680", "reference_id": "2418680", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418680" }, { "reference_url": "https://issues.chromium.org/issues/40095391", "reference_id": "40095391", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-03T19:36:03Z/" } ], "url": "https://issues.chromium.org/issues/40095391" }, { "reference_url": "https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-03T19:36:03Z/" } ], "url": "https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/921788?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.66-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.66-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921789?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.66-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.66-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921790?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.127-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.127-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582091?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.153-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gbt-xkej-k7aw" }, { "vulnerability": "VCID-2s6k-knqz-s7bv" }, { "vulnerability": "VCID-32xu-tbuh-nfds" }, { "vulnerability": "VCID-5znj-k78s-suca" }, { "vulnerability": "VCID-6dub-gz8z-m3fk" }, { "vulnerability": "VCID-7gex-zf7d-5ka4" }, { "vulnerability": "VCID-88yy-dyf6-cue7" }, { "vulnerability": "VCID-8uaq-e8kp-87fs" }, { "vulnerability": "VCID-9p5u-1x3q-63dh" }, { "vulnerability": "VCID-9s6e-p69b-suep" }, { "vulnerability": "VCID-9sbp-bp4k-23cn" }, { "vulnerability": "VCID-ehkc-zgaa-23fy" }, { "vulnerability": "VCID-fene-srh1-b3gp" }, { "vulnerability": "VCID-jr1y-txur-ebgr" }, { "vulnerability": "VCID-n5d6-9gwm-vkc7" }, { "vulnerability": "VCID-pg29-vrqh-pka8" }, { "vulnerability": "VCID-pgw2-3qy2-5ban" }, { "vulnerability": "VCID-pmwr-4j1v-s7gu" }, { "vulnerability": "VCID-ptwz-uax5-mqbq" }, { "vulnerability": "VCID-pvbx-j8j1-dkb3" }, { "vulnerability": "VCID-q45n-pmfj-f7ae" }, { "vulnerability": "VCID-r2b4-pdwz-ybae" }, { "vulnerability": "VCID-v2gf-rqxb-57ae" }, { "vulnerability": "VCID-vscd-6s2t-bucr" }, { "vulnerability": "VCID-xfz2-cwzt-tqhz" }, { "vulnerability": "VCID-y17q-5gas-jke9" }, { "vulnerability": "VCID-z8nt-w84w-tkew" }, { "vulnerability": "VCID-zcq4-z2c5-2ffr" }, { "vulnerability": "VCID-zrnp-ujpt-tbee" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.153-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921650?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.177-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.177-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2025-13992" ], "risk_score": 3.0, "exploitability": "0.5", "weighted_severity": "5.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-tkvr-d1xj-ykar" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/34510?format=api", "vulnerability_id": "VCID-u9mq-tb44-4kbc", "summary": "Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-8879", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00111", "scoring_system": "epss", "scoring_elements": "0.29455", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00111", "scoring_system": "epss", "scoring_elements": "0.29532", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00111", "scoring_system": "epss", "scoring_elements": "0.29487", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00111", "scoring_system": "epss", "scoring_elements": "0.29436", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00111", "scoring_system": "epss", "scoring_elements": "0.29555", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00111", "scoring_system": "epss", "scoring_elements": "0.29604", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00111", "scoring_system": "epss", "scoring_elements": "0.29426", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00111", "scoring_system": "epss", "scoring_elements": "0.29488", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00111", "scoring_system": "epss", "scoring_elements": "0.29529", "published_at": "2026-04-09T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-8879" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8879", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8879" }, { "reference_url": "https://issues.chromium.org/issues/432035817", "reference_id": "432035817", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-14T03:55:32Z/" } ], "url": "https://issues.chromium.org/issues/432035817" }, { "reference_url": "https://security.gentoo.org/glsa/202511-04", "reference_id": "GLSA-202511-04", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202511-04" }, { "reference_url": "https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop_12.html", "reference_id": "stable-channel-update-for-desktop_12.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-14T03:55:32Z/" } ], "url": "https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop_12.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/921830?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.127-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.127-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921790?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.127-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.127-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921831?format=api", "purl": "pkg:deb/debian/chromium@139.0.7258.127-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.127-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582091?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.153-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gbt-xkej-k7aw" }, { "vulnerability": "VCID-2s6k-knqz-s7bv" }, { "vulnerability": "VCID-32xu-tbuh-nfds" }, { "vulnerability": "VCID-5znj-k78s-suca" }, { "vulnerability": "VCID-6dub-gz8z-m3fk" }, { "vulnerability": "VCID-7gex-zf7d-5ka4" }, { "vulnerability": "VCID-88yy-dyf6-cue7" }, { "vulnerability": "VCID-8uaq-e8kp-87fs" }, { "vulnerability": "VCID-9p5u-1x3q-63dh" }, { "vulnerability": "VCID-9s6e-p69b-suep" }, { "vulnerability": "VCID-9sbp-bp4k-23cn" }, { "vulnerability": "VCID-ehkc-zgaa-23fy" }, { "vulnerability": "VCID-fene-srh1-b3gp" }, { "vulnerability": "VCID-jr1y-txur-ebgr" }, { "vulnerability": "VCID-n5d6-9gwm-vkc7" }, { "vulnerability": "VCID-pg29-vrqh-pka8" }, { "vulnerability": "VCID-pgw2-3qy2-5ban" }, { "vulnerability": "VCID-pmwr-4j1v-s7gu" }, { "vulnerability": "VCID-ptwz-uax5-mqbq" }, { "vulnerability": "VCID-pvbx-j8j1-dkb3" }, { "vulnerability": "VCID-q45n-pmfj-f7ae" }, { "vulnerability": "VCID-r2b4-pdwz-ybae" }, { "vulnerability": "VCID-v2gf-rqxb-57ae" }, { "vulnerability": "VCID-vscd-6s2t-bucr" }, { "vulnerability": "VCID-xfz2-cwzt-tqhz" }, { "vulnerability": "VCID-y17q-5gas-jke9" }, { "vulnerability": "VCID-z8nt-w84w-tkew" }, { "vulnerability": "VCID-zcq4-z2c5-2ffr" }, { "vulnerability": "VCID-zrnp-ujpt-tbee" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.153-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921650?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.177-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.177-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2025-8879" ], "risk_score": 2.6, "exploitability": "0.5", "weighted_severity": "5.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-u9mq-tb44-4kbc" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@139.0.7258.127-1~deb13u1%3Fdistro=trixie" }