Lookup for vulnerable packages by Package URL.
| Purl | pkg:deb/debian/qtbase-opensource-src@0?distro=trixie |
| Type | deb |
| Namespace | debian |
| Name | qtbase-opensource-src |
| Version | 0 |
| Qualifiers |
|
| Subpath | |
| Is_vulnerable | false |
| Next_non_vulnerable_version | 5.1.1+dfsg-6 |
| Latest_non_vulnerable_version | 5.15.17+dfsg-8 |
| Affected_by_vulnerabilities |
|
| Fixing_vulnerabilities |
| 0 |
|
| 1 |
| url |
VCID-d7k5-7dmj-fbd4 |
| vulnerability_id |
VCID-d7k5-7dmj-fbd4 |
| summary |
qt: Improper Link Resolution Before File Access in QFileSystemEngine on Windows |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2025-4211 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00162 |
| scoring_system |
epss |
| scoring_elements |
0.36862 |
| published_at |
2026-06-09T12:55:00Z |
|
| 1 |
| value |
0.00162 |
| scoring_system |
epss |
| scoring_elements |
0.36888 |
| published_at |
2026-06-07T12:55:00Z |
|
| 2 |
| value |
0.00162 |
| scoring_system |
epss |
| scoring_elements |
0.3685 |
| published_at |
2026-06-08T12:55:00Z |
|
| 3 |
| value |
0.00162 |
| scoring_system |
epss |
| scoring_elements |
0.36916 |
| published_at |
2026-06-05T12:55:00Z |
|
| 4 |
| value |
0.00162 |
| scoring_system |
epss |
| scoring_elements |
0.36923 |
| published_at |
2026-06-06T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2025-4211 |
|
| 2 |
|
| 3 |
|
|
| fixed_packages |
|
| aliases |
CVE-2025-4211
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-d7k5-7dmj-fbd4 |
|
| 2 |
| url |
VCID-j8yv-hc6u-4kcx |
| vulnerability_id |
VCID-j8yv-hc6u-4kcx |
| summary |
encodeText in QDom in Qt before 6.8.0 has a complex algorithm involving XML string copy and inline replacement of parts of a string (with relocation of later data). |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2025-30348 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00042 |
| scoring_system |
epss |
| scoring_elements |
0.13177 |
| published_at |
2026-06-09T12:55:00Z |
|
| 1 |
| value |
0.00042 |
| scoring_system |
epss |
| scoring_elements |
0.1326 |
| published_at |
2026-06-06T12:55:00Z |
|
| 2 |
| value |
0.00042 |
| scoring_system |
epss |
| scoring_elements |
0.13221 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.00042 |
| scoring_system |
epss |
| scoring_elements |
0.13146 |
| published_at |
2026-06-08T12:55:00Z |
|
| 4 |
| value |
0.00042 |
| scoring_system |
epss |
| scoring_elements |
0.13257 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2025-30348 |
|
| 1 |
|
| 2 |
|
|
| fixed_packages |
|
| aliases |
CVE-2025-30348
|
| risk_score |
1.4 |
| exploitability |
0.5 |
| weighted_severity |
2.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-j8yv-hc6u-4kcx |
|
| 3 |
| url |
VCID-pnsk-serk-2bcz |
| vulnerability_id |
VCID-pnsk-serk-2bcz |
| summary |
qt: corrupted font loaded via QFontDatabase::addApplicationFont{FromData] leads to DoS |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2023-43114 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00051 |
| scoring_system |
epss |
| scoring_elements |
0.16226 |
| published_at |
2026-06-05T12:55:00Z |
|
| 1 |
| value |
0.00051 |
| scoring_system |
epss |
| scoring_elements |
0.16217 |
| published_at |
2026-06-06T12:55:00Z |
|
| 2 |
| value |
0.00051 |
| scoring_system |
epss |
| scoring_elements |
0.16111 |
| published_at |
2026-06-09T12:55:00Z |
|
| 3 |
| value |
0.00051 |
| scoring_system |
epss |
| scoring_elements |
0.16174 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00051 |
| scoring_system |
epss |
| scoring_elements |
0.16088 |
| published_at |
2026-06-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2023-43114 |
|
| 2 |
|
| 3 |
|
|
| fixed_packages |
|
| aliases |
CVE-2023-43114
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-pnsk-serk-2bcz |
|
| 4 |
| url |
VCID-s8af-9r4x-t7er |
| vulnerability_id |
VCID-s8af-9r4x-t7er |
| summary |
arbitrary code execution |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38593 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00834 |
| scoring_system |
epss |
| scoring_elements |
0.7501 |
| published_at |
2026-06-09T12:55:00Z |
|
| 1 |
| value |
0.00834 |
| scoring_system |
epss |
| scoring_elements |
0.74998 |
| published_at |
2026-06-07T12:55:00Z |
|
| 2 |
| value |
0.00834 |
| scoring_system |
epss |
| scoring_elements |
0.74983 |
| published_at |
2026-06-08T12:55:00Z |
|
| 3 |
| value |
0.00834 |
| scoring_system |
epss |
| scoring_elements |
0.74973 |
| published_at |
2026-06-04T12:55:00Z |
|
| 4 |
| value |
0.00834 |
| scoring_system |
epss |
| scoring_elements |
0.75001 |
| published_at |
2026-06-05T12:55:00Z |
|
| 5 |
| value |
0.00834 |
| scoring_system |
epss |
| scoring_elements |
0.75006 |
| published_at |
2026-06-06T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38593 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-38593
|
| risk_score |
3.4 |
| exploitability |
0.5 |
| weighted_severity |
6.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-s8af-9r4x-t7er |
|
| 5 |
|
| 6 |
| url |
VCID-ujpt-rwta-w3cu |
| vulnerability_id |
VCID-ujpt-rwta-w3cu |
| summary |
Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-25634 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00453 |
| scoring_system |
epss |
| scoring_elements |
0.64091 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00453 |
| scoring_system |
epss |
| scoring_elements |
0.64135 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.00453 |
| scoring_system |
epss |
| scoring_elements |
0.64144 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00453 |
| scoring_system |
epss |
| scoring_elements |
0.64133 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00453 |
| scoring_system |
epss |
| scoring_elements |
0.64122 |
| published_at |
2026-06-08T12:55:00Z |
|
| 5 |
| value |
0.00453 |
| scoring_system |
epss |
| scoring_elements |
0.64142 |
| published_at |
2026-06-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-25634 |
|
| 2 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-25634
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ujpt-rwta-w3cu |
|
| 7 |
|
| 8 |
| url |
VCID-zqm4-dhzp-tuff |
| vulnerability_id |
VCID-zqm4-dhzp-tuff |
| summary |
setMarkdown in Qt before 5.14.2 has a use-after-free related to QTextMarkdownImporter::insertBlock. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2020-12267 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00466 |
| scoring_system |
epss |
| scoring_elements |
0.64754 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00466 |
| scoring_system |
epss |
| scoring_elements |
0.64796 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.00466 |
| scoring_system |
epss |
| scoring_elements |
0.64806 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00466 |
| scoring_system |
epss |
| scoring_elements |
0.64795 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00466 |
| scoring_system |
epss |
| scoring_elements |
0.64784 |
| published_at |
2026-06-08T12:55:00Z |
|
| 5 |
| value |
0.00466 |
| scoring_system |
epss |
| scoring_elements |
0.64802 |
| published_at |
2026-06-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2020-12267 |
|
| 2 |
|
| 3 |
|
|
| fixed_packages |
|
| aliases |
CVE-2020-12267
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-zqm4-dhzp-tuff |
|
|
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:deb/debian/qtbase-opensource-src@0%3Fdistro=trixie |