Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-kjfx-qqpg-jbhh
SummaryA critical issue has been discovered in GitLab affecting all versions starting from 14.0 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 where an authenticated user authorized to import projects could import a maliciously crafted project leading to remote code execution.
Aliases
0
alias CVE-2022-2185
Fixed_packages
0
url pkg:deb/debian/gitlab@15.10.8%2Bds1-2?distro=sid
purl pkg:deb/debian/gitlab@15.10.8%2Bds1-2?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gitlab@15.10.8%252Bds1-2%3Fdistro=sid
1
url pkg:deb/debian/gitlab@17.6.5-19?distro=sid
purl pkg:deb/debian/gitlab@17.6.5-19?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gitlab@17.6.5-19%3Fdistro=sid
Affected_packages
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-2185
reference_id
reference_type
scores
0
value 0.90111
scoring_system epss
scoring_elements 0.99585
published_at 2026-04-02T12:55:00Z
1
value 0.90111
scoring_system epss
scoring_elements 0.99586
published_at 2026-04-04T12:55:00Z
2
value 0.90111
scoring_system epss
scoring_elements 0.99587
published_at 2026-04-11T12:55:00Z
3
value 0.90111
scoring_system epss
scoring_elements 0.99588
published_at 2026-04-13T12:55:00Z
4
value 0.90111
scoring_system epss
scoring_elements 0.99589
published_at 2026-04-18T12:55:00Z
5
value 0.90111
scoring_system epss
scoring_elements 0.9959
published_at 2026-04-24T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-2185
Weaknesses
Exploits
Severity_range_scorenull
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-kjfx-qqpg-jbhh