Lookup for vulnerable packages by Package URL.

Purlpkg:maven/org.eclipse.lemminx/lemminx-parent@0.19.0
Typemaven
Namespaceorg.eclipse.lemminx
Namelemminx-parent
Version0.19.0
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-qj4v-ytyg-v7am
vulnerability_id VCID-qj4v-ytyg-v7am
summary Path Traversal in LemMinX
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0673
reference_id
reference_type
scores
0
value 0.00176
scoring_system epss
scoring_elements 0.38938
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0673
1
reference_url https://github.com/eclipse/lemminx
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/eclipse/lemminx
2
reference_url https://github.com/eclipse/lemminx/blob/master/CHANGELOG.md#0190-february-14-2022
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/eclipse/lemminx/blob/master/CHANGELOG.md#0190-february-14-2022
3
reference_url https://github.com/eclipse/lemminx/pull/1171
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/eclipse/lemminx/pull/1171
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0673
reference_id CVE-2022-0673
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0673
5
reference_url https://github.com/advisories/GHSA-gggp-gh2p-996x
reference_id GHSA-gggp-gh2p-996x
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-gggp-gh2p-996x
fixed_packages
0
url pkg:maven/org.eclipse.lemminx/lemminx-parent@0.19.0
purl pkg:maven/org.eclipse.lemminx/lemminx-parent@0.19.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.lemminx/lemminx-parent@0.19.0
aliases CVE-2022-0673, GHSA-gggp-gh2p-996x
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qj4v-ytyg-v7am
1
url VCID-v2pf-9h1s-ruen
vulnerability_id VCID-v2pf-9h1s-ruen
summary Server-Side Request Forgery and Uncontrolled Resource Consumption in LemMinX
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0671
reference_id
reference_type
scores
0
value 0.00384
scoring_system epss
scoring_elements 0.60084
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0671
1
reference_url https://github.com/eclipse/lemminx
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/eclipse/lemminx
2
reference_url https://github.com/eclipse/lemminx/blob/master/CHANGELOG.md#0190-february-14-2022
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/eclipse/lemminx/blob/master/CHANGELOG.md#0190-february-14-2022
3
reference_url https://github.com/eclipse/lemminx/issues/1169
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/eclipse/lemminx/issues/1169
4
reference_url https://github.com/redhat-developer/vscode-xml/blob/master/CHANGELOG.md#0190-february-14-2022
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/redhat-developer/vscode-xml/blob/master/CHANGELOG.md#0190-february-14-2022
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0671
reference_id CVE-2022-0671
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0671
6
reference_url https://github.com/advisories/GHSA-52vv-3vf7-f7wh
reference_id GHSA-52vv-3vf7-f7wh
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-52vv-3vf7-f7wh
fixed_packages
0
url pkg:maven/org.eclipse.lemminx/lemminx-parent@0.19.0
purl pkg:maven/org.eclipse.lemminx/lemminx-parent@0.19.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.lemminx/lemminx-parent@0.19.0
aliases CVE-2022-0671, GHSA-52vv-3vf7-f7wh
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-v2pf-9h1s-ruen
2
url VCID-vcy3-9ajv-3bbb
vulnerability_id VCID-vcy3-9ajv-3bbb
summary Exposure of Sensitive Information to an Unauthorized Actor in LemMinX
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0672
reference_id
reference_type
scores
0
value 0.00085
scoring_system epss
scoring_elements 0.24713
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0672
1
reference_url https://github.com/eclipse/lemminx
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/eclipse/lemminx
2
reference_url https://github.com/eclipse/lemminx/blob/master/CHANGELOG.md#0190-february-14-2022
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/eclipse/lemminx/blob/master/CHANGELOG.md#0190-february-14-2022
3
reference_url https://github.com/eclipse/lemminx/commit/076b88052c2a63f60a98ef4b45e3e38c217b70ae
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/eclipse/lemminx/commit/076b88052c2a63f60a98ef4b45e3e38c217b70ae
4
reference_url https://github.com/eclipse/lemminx/pull/1174
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/eclipse/lemminx/pull/1174
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0672
reference_id CVE-2022-0672
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0672
6
reference_url https://github.com/advisories/GHSA-hrxv-694f-22g3
reference_id GHSA-hrxv-694f-22g3
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-hrxv-694f-22g3
fixed_packages
0
url pkg:maven/org.eclipse.lemminx/lemminx-parent@0.19.0
purl pkg:maven/org.eclipse.lemminx/lemminx-parent@0.19.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.lemminx/lemminx-parent@0.19.0
aliases CVE-2022-0672, GHSA-hrxv-694f-22g3
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vcy3-9ajv-3bbb
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.lemminx/lemminx-parent@0.19.0