Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-svws-7gd2-r3f5
SummaryAn issue has been discovered in GitLab affecting all versions before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was incorrectly verifying throttling limits for authenticated package requests which resulted in limits not being enforced.
Aliases
0
alias CVE-2022-1428
Fixed_packages
0
url pkg:alpm/archlinux/gitlab@14.10.2-1
purl pkg:alpm/archlinux/gitlab@14.10.2-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/gitlab@14.10.2-1
Affected_packages
0
url pkg:alpm/archlinux/gitlab@14.10-1
purl pkg:alpm/archlinux/gitlab@14.10-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1tja-ztb9-myhy
1
vulnerability VCID-221v-5q8x-5ygz
2
vulnerability VCID-2gxb-vk9m-c3hd
3
vulnerability VCID-4xun-1v5s-uqbt
4
vulnerability VCID-62y5-e7f4-7kbz
5
vulnerability VCID-a4kg-mmhm-jqhp
6
vulnerability VCID-bvmd-gmg3-eue2
7
vulnerability VCID-hawe-rs16-37bf
8
vulnerability VCID-rc6v-b3x8-87bu
9
vulnerability VCID-svws-7gd2-r3f5
10
vulnerability VCID-wt3g-99mt-uug6
11
vulnerability VCID-wvtd-44nu-ckgb
12
vulnerability VCID-ykza-d472-n7a4
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/gitlab@14.10-1
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-1428
reference_id
reference_type
scores
0
value 0.00139
scoring_system epss
scoring_elements 0.33662
published_at 2026-04-24T12:55:00Z
1
value 0.00139
scoring_system epss
scoring_elements 0.33811
published_at 2026-04-01T12:55:00Z
2
value 0.00139
scoring_system epss
scoring_elements 0.34149
published_at 2026-04-02T12:55:00Z
3
value 0.00139
scoring_system epss
scoring_elements 0.34181
published_at 2026-04-04T12:55:00Z
4
value 0.00139
scoring_system epss
scoring_elements 0.34041
published_at 2026-04-07T12:55:00Z
5
value 0.00139
scoring_system epss
scoring_elements 0.34084
published_at 2026-04-08T12:55:00Z
6
value 0.00139
scoring_system epss
scoring_elements 0.34115
published_at 2026-04-09T12:55:00Z
7
value 0.00139
scoring_system epss
scoring_elements 0.34113
published_at 2026-04-11T12:55:00Z
8
value 0.00139
scoring_system epss
scoring_elements 0.34071
published_at 2026-04-18T12:55:00Z
9
value 0.00139
scoring_system epss
scoring_elements 0.34047
published_at 2026-04-13T12:55:00Z
10
value 0.00139
scoring_system epss
scoring_elements 0.34083
published_at 2026-04-16T12:55:00Z
11
value 0.00139
scoring_system epss
scoring_elements 0.34035
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-1428
1
reference_url https://security.archlinux.org/AVG-2696
reference_id AVG-2696
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2696
Weaknesses
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-svws-7gd2-r3f5