Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/921799?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/921799?format=api", "purl": "pkg:deb/debian/chromium@134.0.6998.88-1?distro=trixie", "type": "deb", "namespace": "debian", "name": "chromium", "version": "134.0.6998.88-1", "qualifiers": { "distro": "trixie" }, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": "134.0.6998.117-1~deb12u1", "latest_non_vulnerable_version": "147.0.7727.101-1", "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/47287?format=api", "vulnerability_id": "VCID-aeyw-f9g1-eqhw", "summary": "Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-1920", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00127", "scoring_system": "epss", "scoring_elements": "0.32109", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00127", "scoring_system": "epss", "scoring_elements": "0.31971", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00127", "scoring_system": "epss", "scoring_elements": "0.32023", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00127", "scoring_system": "epss", "scoring_elements": "0.32051", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00127", "scoring_system": "epss", "scoring_elements": "0.32055", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00127", "scoring_system": "epss", "scoring_elements": "0.32016", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00127", "scoring_system": "epss", "scoring_elements": "0.31983", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00127", "scoring_system": "epss", "scoring_elements": "0.32148", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.0035", "scoring_system": "epss", "scoring_elements": "0.57497", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.0035", "scoring_system": "epss", "scoring_elements": "0.57518", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-1920" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1920", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1920" }, { "reference_url": "https://issues.chromium.org/issues/398065918", "reference_id": "398065918", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-03-12T04:00:39Z/" } ], "url": "https://issues.chromium.org/issues/398065918" }, { "reference_url": "https://security.gentoo.org/glsa/202507-07", "reference_id": "GLSA-202507-07", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202507-07" }, { "reference_url": "https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop_10.html", "reference_id": "stable-channel-update-for-desktop_10.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-03-12T04:00:39Z/" } ], "url": "https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop_10.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/921798?format=api", "purl": "pkg:deb/debian/chromium@134.0.6998.88-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@134.0.6998.88-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921799?format=api", "purl": "pkg:deb/debian/chromium@134.0.6998.88-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@134.0.6998.88-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582091?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.153-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gbt-xkej-k7aw" }, { "vulnerability": "VCID-2s6k-knqz-s7bv" }, { "vulnerability": "VCID-32xu-tbuh-nfds" }, { "vulnerability": "VCID-5znj-k78s-suca" }, { "vulnerability": "VCID-6dub-gz8z-m3fk" }, { "vulnerability": "VCID-7gex-zf7d-5ka4" }, { "vulnerability": "VCID-88yy-dyf6-cue7" }, { "vulnerability": "VCID-8uaq-e8kp-87fs" }, { "vulnerability": "VCID-9p5u-1x3q-63dh" }, { "vulnerability": "VCID-9s6e-p69b-suep" }, { "vulnerability": "VCID-9sbp-bp4k-23cn" }, { "vulnerability": "VCID-ehkc-zgaa-23fy" }, { "vulnerability": "VCID-fene-srh1-b3gp" }, { "vulnerability": "VCID-jr1y-txur-ebgr" }, { "vulnerability": "VCID-n5d6-9gwm-vkc7" }, { "vulnerability": "VCID-pg29-vrqh-pka8" }, { "vulnerability": "VCID-pgw2-3qy2-5ban" }, { "vulnerability": "VCID-pmwr-4j1v-s7gu" }, { "vulnerability": "VCID-ptwz-uax5-mqbq" }, { "vulnerability": "VCID-pvbx-j8j1-dkb3" }, { "vulnerability": "VCID-q45n-pmfj-f7ae" }, { "vulnerability": "VCID-r2b4-pdwz-ybae" }, { "vulnerability": "VCID-v2gf-rqxb-57ae" }, { "vulnerability": "VCID-vscd-6s2t-bucr" }, { "vulnerability": "VCID-xfz2-cwzt-tqhz" }, { "vulnerability": "VCID-y17q-5gas-jke9" }, { "vulnerability": "VCID-z8nt-w84w-tkew" }, { "vulnerability": "VCID-zcq4-z2c5-2ffr" }, { "vulnerability": "VCID-zrnp-ujpt-tbee" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.153-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921650?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.177-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.177-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2025-1920" ], "risk_score": 2.6, "exploitability": "0.5", "weighted_severity": "5.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-aeyw-f9g1-eqhw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/47290?format=api", "vulnerability_id": "VCID-e6py-jm3k-a3ck", "summary": "Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-2137", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.001", "scoring_system": "epss", "scoring_elements": "0.27781", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.001", "scoring_system": "epss", "scoring_elements": "0.27678", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.001", "scoring_system": "epss", "scoring_elements": "0.27721", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.001", "scoring_system": "epss", "scoring_elements": "0.27725", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.001", "scoring_system": "epss", "scoring_elements": "0.27682", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.001", "scoring_system": "epss", "scoring_elements": "0.27624", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.001", "scoring_system": "epss", "scoring_elements": "0.27633", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.001", "scoring_system": "epss", "scoring_elements": "0.2782", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.001", "scoring_system": "epss", "scoring_elements": "0.27611", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00263", "scoring_system": "epss", "scoring_elements": "0.49769", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00263", "scoring_system": "epss", "scoring_elements": "0.49742", "published_at": "2026-04-21T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-2137" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-2137", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-2137" }, { "reference_url": "https://issues.chromium.org/issues/398999390", "reference_id": "398999390", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-03-12T04:00:38Z/" } ], "url": "https://issues.chromium.org/issues/398999390" }, { "reference_url": "https://security.gentoo.org/glsa/202507-07", "reference_id": "GLSA-202507-07", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202507-07" }, { "reference_url": "https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop_10.html", "reference_id": "stable-channel-update-for-desktop_10.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-03-12T04:00:38Z/" } ], "url": "https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop_10.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/921798?format=api", "purl": "pkg:deb/debian/chromium@134.0.6998.88-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@134.0.6998.88-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921799?format=api", "purl": "pkg:deb/debian/chromium@134.0.6998.88-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@134.0.6998.88-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582091?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.153-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gbt-xkej-k7aw" }, { "vulnerability": "VCID-2s6k-knqz-s7bv" }, { "vulnerability": "VCID-32xu-tbuh-nfds" }, { "vulnerability": "VCID-5znj-k78s-suca" }, { "vulnerability": "VCID-6dub-gz8z-m3fk" }, { "vulnerability": "VCID-7gex-zf7d-5ka4" }, { "vulnerability": "VCID-88yy-dyf6-cue7" }, { "vulnerability": "VCID-8uaq-e8kp-87fs" }, { "vulnerability": "VCID-9p5u-1x3q-63dh" }, { "vulnerability": "VCID-9s6e-p69b-suep" }, { "vulnerability": "VCID-9sbp-bp4k-23cn" }, { "vulnerability": "VCID-ehkc-zgaa-23fy" }, { "vulnerability": "VCID-fene-srh1-b3gp" }, { "vulnerability": "VCID-jr1y-txur-ebgr" }, { "vulnerability": "VCID-n5d6-9gwm-vkc7" }, { "vulnerability": "VCID-pg29-vrqh-pka8" }, { "vulnerability": "VCID-pgw2-3qy2-5ban" }, { "vulnerability": "VCID-pmwr-4j1v-s7gu" }, { "vulnerability": "VCID-ptwz-uax5-mqbq" }, { "vulnerability": "VCID-pvbx-j8j1-dkb3" }, { "vulnerability": "VCID-q45n-pmfj-f7ae" }, { "vulnerability": "VCID-r2b4-pdwz-ybae" }, { "vulnerability": "VCID-v2gf-rqxb-57ae" }, { "vulnerability": "VCID-vscd-6s2t-bucr" }, { "vulnerability": "VCID-xfz2-cwzt-tqhz" }, { "vulnerability": "VCID-y17q-5gas-jke9" }, { "vulnerability": "VCID-z8nt-w84w-tkew" }, { "vulnerability": "VCID-zcq4-z2c5-2ffr" }, { "vulnerability": "VCID-zrnp-ujpt-tbee" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.153-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921650?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.177-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.177-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2025-2137" ], "risk_score": 2.6, "exploitability": "0.5", "weighted_severity": "5.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-e6py-jm3k-a3ck" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/47289?format=api", "vulnerability_id": "VCID-j9bt-u7v1-mkgt", "summary": "Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-2136", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00207", "scoring_system": "epss", "scoring_elements": "0.4306", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00207", "scoring_system": "epss", "scoring_elements": "0.4308", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00207", "scoring_system": "epss", "scoring_elements": "0.43092", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00207", "scoring_system": "epss", "scoring_elements": "0.43115", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00207", "scoring_system": "epss", "scoring_elements": "0.43081", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00207", "scoring_system": "epss", "scoring_elements": "0.43066", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00207", "scoring_system": "epss", "scoring_elements": "0.43125", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00207", "scoring_system": "epss", "scoring_elements": "0.43088", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00207", "scoring_system": "epss", "scoring_elements": "0.43027", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.0042", "scoring_system": "epss", "scoring_elements": "0.61998", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.0042", "scoring_system": "epss", "scoring_elements": "0.61978", "published_at": "2026-04-21T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-2136" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-2136", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-2136" }, { "reference_url": "https://issues.chromium.org/issues/395032416", "reference_id": "395032416", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-03-12T04:00:34Z/" } ], "url": "https://issues.chromium.org/issues/395032416" }, { "reference_url": "https://security.gentoo.org/glsa/202507-07", "reference_id": "GLSA-202507-07", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202507-07" }, { "reference_url": "https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop_10.html", "reference_id": "stable-channel-update-for-desktop_10.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-03-12T04:00:34Z/" } ], "url": "https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop_10.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/921798?format=api", "purl": "pkg:deb/debian/chromium@134.0.6998.88-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@134.0.6998.88-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921799?format=api", "purl": "pkg:deb/debian/chromium@134.0.6998.88-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@134.0.6998.88-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582091?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.153-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gbt-xkej-k7aw" }, { "vulnerability": "VCID-2s6k-knqz-s7bv" }, { "vulnerability": "VCID-32xu-tbuh-nfds" }, { "vulnerability": "VCID-5znj-k78s-suca" }, { "vulnerability": "VCID-6dub-gz8z-m3fk" }, { "vulnerability": "VCID-7gex-zf7d-5ka4" }, { "vulnerability": "VCID-88yy-dyf6-cue7" }, { "vulnerability": "VCID-8uaq-e8kp-87fs" }, { "vulnerability": "VCID-9p5u-1x3q-63dh" }, { "vulnerability": "VCID-9s6e-p69b-suep" }, { "vulnerability": "VCID-9sbp-bp4k-23cn" }, { "vulnerability": "VCID-ehkc-zgaa-23fy" }, { "vulnerability": "VCID-fene-srh1-b3gp" }, { "vulnerability": "VCID-jr1y-txur-ebgr" }, { "vulnerability": "VCID-n5d6-9gwm-vkc7" }, { "vulnerability": "VCID-pg29-vrqh-pka8" }, { "vulnerability": "VCID-pgw2-3qy2-5ban" }, { "vulnerability": "VCID-pmwr-4j1v-s7gu" }, { "vulnerability": "VCID-ptwz-uax5-mqbq" }, { "vulnerability": "VCID-pvbx-j8j1-dkb3" }, { "vulnerability": "VCID-q45n-pmfj-f7ae" }, { "vulnerability": "VCID-r2b4-pdwz-ybae" }, { "vulnerability": "VCID-v2gf-rqxb-57ae" }, { "vulnerability": "VCID-vscd-6s2t-bucr" }, { "vulnerability": "VCID-xfz2-cwzt-tqhz" }, { "vulnerability": "VCID-y17q-5gas-jke9" }, { "vulnerability": "VCID-z8nt-w84w-tkew" }, { "vulnerability": "VCID-zcq4-z2c5-2ffr" }, { "vulnerability": "VCID-zrnp-ujpt-tbee" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.153-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921650?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.177-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.177-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2025-2136" ], "risk_score": 2.6, "exploitability": "0.5", "weighted_severity": "5.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-j9bt-u7v1-mkgt" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/47288?format=api", "vulnerability_id": "VCID-uvbr-kyc1-wkdw", "summary": "Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-2135", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00185", "scoring_system": "epss", "scoring_elements": "0.40257", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00185", "scoring_system": "epss", "scoring_elements": "0.40267", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00185", "scoring_system": "epss", "scoring_elements": "0.40221", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00185", "scoring_system": "epss", "scoring_elements": "0.40241", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00185", "scoring_system": "epss", "scoring_elements": "0.40279", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00185", "scoring_system": "epss", "scoring_elements": "0.40269", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00185", "scoring_system": "epss", "scoring_elements": "0.40204", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00198", "scoring_system": "epss", "scoring_elements": "0.4195", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00198", "scoring_system": "epss", "scoring_elements": "0.41978", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.02631", "scoring_system": "epss", "scoring_elements": "0.85708", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.04826", "scoring_system": "epss", "scoring_elements": "0.89527", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-2135" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-2135", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-2135" }, { "reference_url": "https://issues.chromium.org/issues/400052777", "reference_id": "400052777", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-03-12T04:00:35Z/" } ], "url": "https://issues.chromium.org/issues/400052777" }, { "reference_url": "https://security.gentoo.org/glsa/202507-07", "reference_id": "GLSA-202507-07", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202507-07" }, { "reference_url": "https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop_10.html", "reference_id": "stable-channel-update-for-desktop_10.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-03-12T04:00:35Z/" } ], "url": "https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop_10.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/921798?format=api", "purl": "pkg:deb/debian/chromium@134.0.6998.88-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@134.0.6998.88-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921799?format=api", "purl": "pkg:deb/debian/chromium@134.0.6998.88-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@134.0.6998.88-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582091?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.153-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gbt-xkej-k7aw" }, { "vulnerability": "VCID-2s6k-knqz-s7bv" }, { "vulnerability": "VCID-32xu-tbuh-nfds" }, { "vulnerability": "VCID-5znj-k78s-suca" }, { "vulnerability": "VCID-6dub-gz8z-m3fk" }, { "vulnerability": "VCID-7gex-zf7d-5ka4" }, { "vulnerability": "VCID-88yy-dyf6-cue7" }, { "vulnerability": "VCID-8uaq-e8kp-87fs" }, { "vulnerability": "VCID-9p5u-1x3q-63dh" }, { "vulnerability": "VCID-9s6e-p69b-suep" }, { "vulnerability": "VCID-9sbp-bp4k-23cn" }, { "vulnerability": "VCID-ehkc-zgaa-23fy" }, { "vulnerability": "VCID-fene-srh1-b3gp" }, { "vulnerability": "VCID-jr1y-txur-ebgr" }, { "vulnerability": "VCID-n5d6-9gwm-vkc7" }, { "vulnerability": "VCID-pg29-vrqh-pka8" }, { "vulnerability": "VCID-pgw2-3qy2-5ban" }, { "vulnerability": "VCID-pmwr-4j1v-s7gu" }, { "vulnerability": "VCID-ptwz-uax5-mqbq" }, { "vulnerability": "VCID-pvbx-j8j1-dkb3" }, { "vulnerability": "VCID-q45n-pmfj-f7ae" }, { "vulnerability": "VCID-r2b4-pdwz-ybae" }, { "vulnerability": "VCID-v2gf-rqxb-57ae" }, { "vulnerability": "VCID-vscd-6s2t-bucr" }, { "vulnerability": "VCID-xfz2-cwzt-tqhz" }, { "vulnerability": "VCID-y17q-5gas-jke9" }, { "vulnerability": "VCID-z8nt-w84w-tkew" }, { "vulnerability": "VCID-zcq4-z2c5-2ffr" }, { "vulnerability": "VCID-zrnp-ujpt-tbee" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.153-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/921650?format=api", "purl": "pkg:deb/debian/chromium@146.0.7680.177-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@146.0.7680.177-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2025-2135" ], "risk_score": 2.6, "exploitability": "0.5", "weighted_severity": "5.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-uvbr-kyc1-wkdw" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@134.0.6998.88-1%3Fdistro=trixie" }