Lookup for vulnerable packages by Package URL.

Purlpkg:apk/alpine/nodejs@22.13.1-r0?arch=aarch64&distroversion=edge&reponame=main
Typeapk
Namespacealpine
Namenodejs
Version22.13.1-r0
Qualifiers
arch aarch64
distroversion edge
reponame main
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version22.16.0-r0
Latest_non_vulnerable_version24.14.1-r0
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-131b-wwsx-jfap
vulnerability_id VCID-131b-wwsx-jfap
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-23084
reference_id
reference_type
scores
0
value 0.01289
scoring_system epss
scoring_elements 0.80067
published_at 2026-06-11T12:55:00Z
1
value 0.01289
scoring_system epss
scoring_elements 0.8013
published_at 2026-06-12T12:55:00Z
2
value 0.01289
scoring_system epss
scoring_elements 0.80145
published_at 2026-06-13T12:55:00Z
3
value 0.01289
scoring_system epss
scoring_elements 0.80137
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-23084
1
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2
reference_url https://nodejs.org/en/blog/vulnerability/january-2025-security-releases
reference_id january-2025-security-releases
reference_type
scores
0
value 5.6
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-28T15:07:59Z/
url https://nodejs.org/en/blog/vulnerability/january-2025-security-releases
fixed_packages
0
url pkg:apk/alpine/nodejs@22.13.1-r0?arch=aarch64&distroversion=edge&reponame=main
purl pkg:apk/alpine/nodejs@22.13.1-r0?arch=aarch64&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@22.13.1-r0%3Farch=aarch64&distroversion=edge&reponame=main
aliases CVE-2025-23084
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-131b-wwsx-jfap
1
url VCID-26je-rzbq-7bac
vulnerability_id VCID-26je-rzbq-7bac
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-23085.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-23085.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-23085
reference_id
reference_type
scores
0
value 0.00164
scoring_system epss
scoring_elements 0.37437
published_at 2026-06-14T12:55:00Z
1
value 0.00164
scoring_system epss
scoring_elements 0.37249
published_at 2026-06-11T12:55:00Z
2
value 0.00164
scoring_system epss
scoring_elements 0.37427
published_at 2026-06-12T12:55:00Z
3
value 0.00164
scoring_system epss
scoring_elements 0.37451
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-23085
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-23085
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-23085
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1094134
reference_id 1094134
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1094134
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2342618
reference_id 2342618
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2342618
6
reference_url https://security.gentoo.org/glsa/202506-08
reference_id GLSA-202506-08
reference_type
scores
url https://security.gentoo.org/glsa/202506-08
7
reference_url https://nodejs.org/en/blog/vulnerability/january-2025-security-releases
reference_id january-2025-security-releases
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-07T15:50:24Z/
url https://nodejs.org/en/blog/vulnerability/january-2025-security-releases
8
reference_url https://access.redhat.com/errata/RHSA-2025:1351
reference_id RHSA-2025:1351
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1351
9
reference_url https://access.redhat.com/errata/RHSA-2025:1443
reference_id RHSA-2025:1443
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1443
10
reference_url https://access.redhat.com/errata/RHSA-2025:1446
reference_id RHSA-2025:1446
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1446
11
reference_url https://access.redhat.com/errata/RHSA-2025:1582
reference_id RHSA-2025:1582
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1582
12
reference_url https://access.redhat.com/errata/RHSA-2025:1611
reference_id RHSA-2025:1611
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1611
13
reference_url https://access.redhat.com/errata/RHSA-2025:1613
reference_id RHSA-2025:1613
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1613
fixed_packages
0
url pkg:apk/alpine/nodejs@22.13.1-r0?arch=aarch64&distroversion=edge&reponame=main
purl pkg:apk/alpine/nodejs@22.13.1-r0?arch=aarch64&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@22.13.1-r0%3Farch=aarch64&distroversion=edge&reponame=main
aliases CVE-2025-23085
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-26je-rzbq-7bac
2
url VCID-bb3s-t1q2-uufg
vulnerability_id VCID-bb3s-t1q2-uufg
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-22150.json
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-22150.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-22150
reference_id
reference_type
scores
0
value 0.00605
scoring_system epss
scoring_elements 0.70097
published_at 2026-06-11T12:55:00Z
1
value 0.0082
scoring_system epss
scoring_elements 0.74902
published_at 2026-06-14T12:55:00Z
2
value 0.0082
scoring_system epss
scoring_elements 0.74892
published_at 2026-06-12T12:55:00Z
3
value 0.0082
scoring_system epss
scoring_elements 0.74906
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-22150
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://github.com/nodejs/undici
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/nodejs/undici
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-22150
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-22150
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2339176
reference_id 2339176
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2339176
6
reference_url https://hackerone.com/reports/2913312
reference_id 2913312
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-01-21T18:34:22Z/
url https://hackerone.com/reports/2913312
7
reference_url https://github.com/nodejs/undici/commit/711e20772764c29f6622ddc937c63b6eefdf07d0
reference_id 711e20772764c29f6622ddc937c63b6eefdf07d0
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-01-21T18:34:22Z/
url https://github.com/nodejs/undici/commit/711e20772764c29f6622ddc937c63b6eefdf07d0
8
reference_url https://github.com/nodejs/undici/blob/8b06b8250907d92fead664b3368f1d2aa27c1f35/lib/web/fetch/body.js#L113
reference_id body.js#L113
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-01-21T18:34:22Z/
url https://github.com/nodejs/undici/blob/8b06b8250907d92fead664b3368f1d2aa27c1f35/lib/web/fetch/body.js#L113
9
reference_url https://github.com/nodejs/undici/commit/c2d78cd19fe4f4c621424491e26ce299e65e934a
reference_id c2d78cd19fe4f4c621424491e26ce299e65e934a
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-01-21T18:34:22Z/
url https://github.com/nodejs/undici/commit/c2d78cd19fe4f4c621424491e26ce299e65e934a
10
reference_url https://github.com/nodejs/undici/commit/c3acc6050b781b827d80c86cbbab34f14458d385
reference_id c3acc6050b781b827d80c86cbbab34f14458d385
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-01-21T18:34:22Z/
url https://github.com/nodejs/undici/commit/c3acc6050b781b827d80c86cbbab34f14458d385
11
reference_url https://github.com/advisories/GHSA-c76h-2ccp-4975
reference_id GHSA-c76h-2ccp-4975
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-c76h-2ccp-4975
12
reference_url https://github.com/nodejs/undici/security/advisories/GHSA-c76h-2ccp-4975
reference_id GHSA-c76h-2ccp-4975
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-01-21T18:34:22Z/
url https://github.com/nodejs/undici/security/advisories/GHSA-c76h-2ccp-4975
13
reference_url https://blog.securityevaluators.com/hacking-the-javascript-lottery-80cc437e3b7f
reference_id hacking-the-javascript-lottery-80cc437e3b7f
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-01-21T18:34:22Z/
url https://blog.securityevaluators.com/hacking-the-javascript-lottery-80cc437e3b7f
14
reference_url https://access.redhat.com/errata/RHSA-2025:1351
reference_id RHSA-2025:1351
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1351
15
reference_url https://access.redhat.com/errata/RHSA-2025:1443
reference_id RHSA-2025:1443
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1443
16
reference_url https://access.redhat.com/errata/RHSA-2025:1446
reference_id RHSA-2025:1446
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1446
17
reference_url https://access.redhat.com/errata/RHSA-2025:1454
reference_id RHSA-2025:1454
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1454
18
reference_url https://access.redhat.com/errata/RHSA-2025:1582
reference_id RHSA-2025:1582
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1582
19
reference_url https://access.redhat.com/errata/RHSA-2025:1611
reference_id RHSA-2025:1611
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1611
20
reference_url https://access.redhat.com/errata/RHSA-2025:1613
reference_id RHSA-2025:1613
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1613
21
reference_url https://access.redhat.com/errata/RHSA-2025:17145
reference_id RHSA-2025:17145
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:17145
22
reference_url https://access.redhat.com/errata/RHSA-2025:1931
reference_id RHSA-2025:1931
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1931
23
reference_url https://access.redhat.com/errata/RHSA-2025:21368
reference_id RHSA-2025:21368
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:21368
24
reference_url https://access.redhat.com/errata/RHSA-2025:2588
reference_id RHSA-2025:2588
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:2588
25
reference_url https://access.redhat.com/errata/RHSA-2025:3368
reference_id RHSA-2025:3368
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:3368
26
reference_url https://access.redhat.com/errata/RHSA-2025:3374
reference_id RHSA-2025:3374
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:3374
27
reference_url https://access.redhat.com/errata/RHSA-2025:3397
reference_id RHSA-2025:3397
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:3397
fixed_packages
0
url pkg:apk/alpine/nodejs@22.13.1-r0?arch=aarch64&distroversion=edge&reponame=main
purl pkg:apk/alpine/nodejs@22.13.1-r0?arch=aarch64&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@22.13.1-r0%3Farch=aarch64&distroversion=edge&reponame=main
aliases CVE-2025-22150, GHSA-c76h-2ccp-4975
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bb3s-t1q2-uufg
3
url VCID-tr4m-42f1-vkgm
vulnerability_id VCID-tr4m-42f1-vkgm
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-23083.json
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-23083.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-23083
reference_id
reference_type
scores
0
value 0.00105
scoring_system epss
scoring_elements 0.28046
published_at 2026-06-11T12:55:00Z
1
value 0.00105
scoring_system epss
scoring_elements 0.28244
published_at 2026-06-12T12:55:00Z
2
value 0.00143
scoring_system epss
scoring_elements 0.34412
published_at 2026-06-14T12:55:00Z
3
value 0.00143
scoring_system epss
scoring_elements 0.34433
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-23083
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1094134
reference_id 1094134
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1094134
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2339392
reference_id 2339392
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2339392
5
reference_url https://security.gentoo.org/glsa/202506-08
reference_id GLSA-202506-08
reference_type
scores
url https://security.gentoo.org/glsa/202506-08
6
reference_url https://nodejs.org/en/blog/vulnerability/january-2025-security-releases
reference_id january-2025-security-releases
reference_type
scores
0
value 7.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-01-28T04:55:27Z/
url https://nodejs.org/en/blog/vulnerability/january-2025-security-releases
7
reference_url https://access.redhat.com/errata/RHSA-2025:1351
reference_id RHSA-2025:1351
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1351
8
reference_url https://access.redhat.com/errata/RHSA-2025:1443
reference_id RHSA-2025:1443
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1443
9
reference_url https://access.redhat.com/errata/RHSA-2025:1522
reference_id RHSA-2025:1522
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1522
10
reference_url https://access.redhat.com/errata/RHSA-2025:1611
reference_id RHSA-2025:1611
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1611
11
reference_url https://access.redhat.com/errata/RHSA-2025:1613
reference_id RHSA-2025:1613
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1613
fixed_packages
0
url pkg:apk/alpine/nodejs@22.13.1-r0?arch=aarch64&distroversion=edge&reponame=main
purl pkg:apk/alpine/nodejs@22.13.1-r0?arch=aarch64&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@22.13.1-r0%3Farch=aarch64&distroversion=edge&reponame=main
aliases CVE-2025-23083
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tr4m-42f1-vkgm
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@22.13.1-r0%3Farch=aarch64&distroversion=edge&reponame=main