Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/roundcube@1.4.12%2Bdfsg.1-1~deb11u1?distro=trixie
Typedeb
Namespacedebian
Nameroundcube
Version1.4.12+dfsg.1-1~deb11u1
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version1.4.13+dfsg.1-1~deb11u1
Latest_non_vulnerable_version1.6.15+dfsg-1
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-2eyy-k49d-m3af
vulnerability_id VCID-2eyy-k49d-m3af
summary Multiple vulnerabilities have been discovered in Roundcube, the worst of which could lead to execution of arbitrary code.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-44026
reference_id
reference_type
scores
0
value 0.64041
scoring_system epss
scoring_elements 0.98426
published_at 2026-04-04T12:55:00Z
1
value 0.64041
scoring_system epss
scoring_elements 0.98422
published_at 2026-04-02T12:55:00Z
2
value 0.64041
scoring_system epss
scoring_elements 0.9842
published_at 2026-04-01T12:55:00Z
3
value 0.64041
scoring_system epss
scoring_elements 0.9844
published_at 2026-04-16T12:55:00Z
4
value 0.64041
scoring_system epss
scoring_elements 0.98436
published_at 2026-04-13T12:55:00Z
5
value 0.64041
scoring_system epss
scoring_elements 0.98432
published_at 2026-04-09T12:55:00Z
6
value 0.64041
scoring_system epss
scoring_elements 0.98431
published_at 2026-04-08T12:55:00Z
7
value 0.64041
scoring_system epss
scoring_elements 0.98428
published_at 2026-04-07T12:55:00Z
8
value 0.72527
scoring_system epss
scoring_elements 0.98777
published_at 2026-04-24T12:55:00Z
9
value 0.72527
scoring_system epss
scoring_elements 0.98772
published_at 2026-04-18T12:55:00Z
10
value 0.72527
scoring_system epss
scoring_elements 0.98773
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-44026
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44025
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44025
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44026
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44026
3
reference_url https://bugs.debian.org/1000156
reference_id 1000156
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-04T19:33:07Z/
url https://bugs.debian.org/1000156
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1000156
reference_id 1000156
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1000156
5
reference_url https://github.com/roundcube/roundcubemail/commit/c8947ecb762d9e89c2091bda28d49002817263f1
reference_id c8947ecb762d9e89c2091bda28d49002817263f1
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-04T19:33:07Z/
url https://github.com/roundcube/roundcubemail/commit/c8947ecb762d9e89c2091bda28d49002817263f1
6
reference_url https://www.debian.org/security/2021/dsa-5013
reference_id dsa-5013
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-04T19:33:07Z/
url https://www.debian.org/security/2021/dsa-5013
7
reference_url https://github.com/roundcube/roundcubemail/commit/ee809bde2dcaa04857a919397808a7296681dcfa
reference_id ee809bde2dcaa04857a919397808a7296681dcfa
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-04T19:33:07Z/
url https://github.com/roundcube/roundcubemail/commit/ee809bde2dcaa04857a919397808a7296681dcfa
8
reference_url https://security.gentoo.org/glsa/202507-10
reference_id GLSA-202507-10
reference_type
scores
url https://security.gentoo.org/glsa/202507-10
9
reference_url https://lists.debian.org/debian-lts-announce/2021/12/msg00004.html
reference_id msg00004.html
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-04T19:33:07Z/
url https://lists.debian.org/debian-lts-announce/2021/12/msg00004.html
10
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NDVGIZMQJ5IOM47Y3SAAJRN5VPANKTKO/
reference_id NDVGIZMQJ5IOM47Y3SAAJRN5VPANKTKO
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-04T19:33:07Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NDVGIZMQJ5IOM47Y3SAAJRN5VPANKTKO/
11
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TP3Y5RXTUUOUODNG7HFEKWYNIPIT2NL4/
reference_id TP3Y5RXTUUOUODNG7HFEKWYNIPIT2NL4
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-04T19:33:07Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TP3Y5RXTUUOUODNG7HFEKWYNIPIT2NL4/
12
reference_url https://usn.ubuntu.com/USN-5182-1/
reference_id USN-USN-5182-1
reference_type
scores
url https://usn.ubuntu.com/USN-5182-1/
fixed_packages
0
url pkg:deb/debian/roundcube@1.4.12%2Bdfsg.1-1~deb11u1?distro=trixie
purl pkg:deb/debian/roundcube@1.4.12%2Bdfsg.1-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/roundcube@1.4.12%252Bdfsg.1-1~deb11u1%3Fdistro=trixie
1
url pkg:deb/debian/roundcube@1.4.15%2Bdfsg.1-1%2Bdeb11u4?distro=trixie
purl pkg:deb/debian/roundcube@1.4.15%2Bdfsg.1-1%2Bdeb11u4?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-rdb5-bbvn-7fcq
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/roundcube@1.4.15%252Bdfsg.1-1%252Bdeb11u4%3Fdistro=trixie
2
url pkg:deb/debian/roundcube@1.5.0%2Bdfsg.1-1?distro=trixie
purl pkg:deb/debian/roundcube@1.5.0%2Bdfsg.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/roundcube@1.5.0%252Bdfsg.1-1%3Fdistro=trixie
3
url pkg:deb/debian/roundcube@1.6.5%2Bdfsg-1%2Bdeb12u6?distro=trixie
purl pkg:deb/debian/roundcube@1.6.5%2Bdfsg-1%2Bdeb12u6?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/roundcube@1.6.5%252Bdfsg-1%252Bdeb12u6%3Fdistro=trixie
4
url pkg:deb/debian/roundcube@1.6.13%2Bdfsg-0%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/roundcube@1.6.13%2Bdfsg-0%2Bdeb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/roundcube@1.6.13%252Bdfsg-0%252Bdeb13u1%3Fdistro=trixie
5
url pkg:deb/debian/roundcube@1.6.15%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/roundcube@1.6.15%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/roundcube@1.6.15%252Bdfsg-1%3Fdistro=trixie
aliases CVE-2021-44026
risk_score 10.0
exploitability 2.0
weighted_severity 8.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2eyy-k49d-m3af
1
url VCID-ybv7-hqmj-nbgr
vulnerability_id VCID-ybv7-hqmj-nbgr
summary Multiple vulnerabilities have been discovered in Roundcube, the worst of which could lead to execution of arbitrary code.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-44025
reference_id
reference_type
scores
0
value 0.00629
scoring_system epss
scoring_elements 0.7019
published_at 2026-04-01T12:55:00Z
1
value 0.00629
scoring_system epss
scoring_elements 0.70202
published_at 2026-04-02T12:55:00Z
2
value 0.00629
scoring_system epss
scoring_elements 0.70219
published_at 2026-04-04T12:55:00Z
3
value 0.00629
scoring_system epss
scoring_elements 0.70196
published_at 2026-04-07T12:55:00Z
4
value 0.00629
scoring_system epss
scoring_elements 0.70242
published_at 2026-04-08T12:55:00Z
5
value 0.00629
scoring_system epss
scoring_elements 0.70257
published_at 2026-04-09T12:55:00Z
6
value 0.00629
scoring_system epss
scoring_elements 0.7028
published_at 2026-04-11T12:55:00Z
7
value 0.00629
scoring_system epss
scoring_elements 0.70266
published_at 2026-04-12T12:55:00Z
8
value 0.00629
scoring_system epss
scoring_elements 0.70253
published_at 2026-04-13T12:55:00Z
9
value 0.00629
scoring_system epss
scoring_elements 0.70294
published_at 2026-04-16T12:55:00Z
10
value 0.00629
scoring_system epss
scoring_elements 0.70304
published_at 2026-04-18T12:55:00Z
11
value 0.00629
scoring_system epss
scoring_elements 0.70285
published_at 2026-04-21T12:55:00Z
12
value 0.00629
scoring_system epss
scoring_elements 0.70338
published_at 2026-04-24T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-44025
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44025
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44025
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44026
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44026
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1000156
reference_id 1000156
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1000156
4
reference_url https://security.gentoo.org/glsa/202507-10
reference_id GLSA-202507-10
reference_type
scores
url https://security.gentoo.org/glsa/202507-10
5
reference_url https://usn.ubuntu.com/USN-5182-1/
reference_id USN-USN-5182-1
reference_type
scores
url https://usn.ubuntu.com/USN-5182-1/
fixed_packages
0
url pkg:deb/debian/roundcube@1.4.12%2Bdfsg.1-1~deb11u1?distro=trixie
purl pkg:deb/debian/roundcube@1.4.12%2Bdfsg.1-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/roundcube@1.4.12%252Bdfsg.1-1~deb11u1%3Fdistro=trixie
1
url pkg:deb/debian/roundcube@1.4.15%2Bdfsg.1-1%2Bdeb11u4?distro=trixie
purl pkg:deb/debian/roundcube@1.4.15%2Bdfsg.1-1%2Bdeb11u4?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-rdb5-bbvn-7fcq
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/roundcube@1.4.15%252Bdfsg.1-1%252Bdeb11u4%3Fdistro=trixie
2
url pkg:deb/debian/roundcube@1.5.0%2Bdfsg.1-1?distro=trixie
purl pkg:deb/debian/roundcube@1.5.0%2Bdfsg.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/roundcube@1.5.0%252Bdfsg.1-1%3Fdistro=trixie
3
url pkg:deb/debian/roundcube@1.6.5%2Bdfsg-1%2Bdeb12u6?distro=trixie
purl pkg:deb/debian/roundcube@1.6.5%2Bdfsg-1%2Bdeb12u6?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/roundcube@1.6.5%252Bdfsg-1%252Bdeb12u6%3Fdistro=trixie
4
url pkg:deb/debian/roundcube@1.6.13%2Bdfsg-0%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/roundcube@1.6.13%2Bdfsg-0%2Bdeb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/roundcube@1.6.13%252Bdfsg-0%252Bdeb13u1%3Fdistro=trixie
5
url pkg:deb/debian/roundcube@1.6.15%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/roundcube@1.6.15%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/roundcube@1.6.15%252Bdfsg-1%3Fdistro=trixie
aliases CVE-2021-44025
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ybv7-hqmj-nbgr
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/roundcube@1.4.12%252Bdfsg.1-1~deb11u1%3Fdistro=trixie