Lookup for vulnerable packages by Package URL.

Purlpkg:apk/alpine/qt5-qtwebengine@5.15.16-r6?arch=ppc64le&distroversion=v3.23&reponame=community
Typeapk
Namespacealpine
Nameqt5-qtwebengine
Version5.15.16-r6
Qualifiers
arch ppc64le
distroversion v3.23
reponame community
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version5.15.16-r7
Latest_non_vulnerable_version5.15.17-r10
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-6vnu-1u94-mka3
vulnerability_id VCID-6vnu-1u94-mka3
summary Integer underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a malicious file. (Chromium security severity: High)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-0808
reference_id
reference_type
scores
0
value 0.00344
scoring_system epss
scoring_elements 0.57382
published_at 2026-06-11T12:55:00Z
1
value 0.00344
scoring_system epss
scoring_elements 0.57499
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-0808
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0808
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0808
2
reference_url https://crbug.com/1504936
reference_id 1504936
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-05-09T23:34:13Z/
url https://crbug.com/1504936
3
reference_url https://security.gentoo.org/glsa/202402-23
reference_id GLSA-202402-23
reference_type
scores
url https://security.gentoo.org/glsa/202402-23
4
reference_url https://security.gentoo.org/glsa/202405-14
reference_id GLSA-202405-14
reference_type
scores
url https://security.gentoo.org/glsa/202405-14
5
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMI6GXFONZV6HE3BPZO3AP6GUVQLG4JQ/
reference_id MMI6GXFONZV6HE3BPZO3AP6GUVQLG4JQ
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-05-09T23:34:13Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMI6GXFONZV6HE3BPZO3AP6GUVQLG4JQ/
6
reference_url https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html
reference_id stable-channel-update-for-desktop_23.html
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-05-09T23:34:13Z/
url https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html
7
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VXDSGAFQD4BDB4IB2O4ZUSHC3JCVQEKC/
reference_id VXDSGAFQD4BDB4IB2O4ZUSHC3JCVQEKC
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-05-09T23:34:13Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VXDSGAFQD4BDB4IB2O4ZUSHC3JCVQEKC/
fixed_packages
0
url pkg:apk/alpine/qt5-qtwebengine@5.15.16-r6?arch=ppc64le&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/qt5-qtwebengine@5.15.16-r6?arch=ppc64le&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/qt5-qtwebengine@5.15.16-r6%3Farch=ppc64le&distroversion=v3.23&reponame=community
aliases CVE-2024-0808
risk_score 4.4
exploitability 0.5
weighted_severity 8.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6vnu-1u94-mka3
1
url VCID-8u9u-g38d-43dp
vulnerability_id VCID-8u9u-g38d-43dp
summary Use after free in Network in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a malicious file. (Chromium security severity: High)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-1077
reference_id
reference_type
scores
0
value 0.00794
scoring_system epss
scoring_elements 0.7438
published_at 2026-06-11T12:55:00Z
1
value 0.00794
scoring_system epss
scoring_elements 0.74453
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-1077
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1077
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1077
2
reference_url https://crbug.com/1511085
reference_id 1511085
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-02-13T05:00:24Z/
url https://crbug.com/1511085
3
reference_url https://security.gentoo.org/glsa/202402-23
reference_id GLSA-202402-23
reference_type
scores
url https://security.gentoo.org/glsa/202402-23
4
reference_url https://security.gentoo.org/glsa/202405-14
reference_id GLSA-202405-14
reference_type
scores
url https://security.gentoo.org/glsa/202405-14
5
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NEUXJY3YC3VGIJW2AOHL4NZ7ZK7BRYWY/
reference_id NEUXJY3YC3VGIJW2AOHL4NZ7ZK7BRYWY
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-02-13T05:00:24Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NEUXJY3YC3VGIJW2AOHL4NZ7ZK7BRYWY/
6
reference_url https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_30.html
reference_id stable-channel-update-for-desktop_30.html
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-02-13T05:00:24Z/
url https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_30.html
7
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XCVKRHRWPMITSVFBHQBSNXOVJAKT547Q/
reference_id XCVKRHRWPMITSVFBHQBSNXOVJAKT547Q
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-02-13T05:00:24Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XCVKRHRWPMITSVFBHQBSNXOVJAKT547Q/
fixed_packages
0
url pkg:apk/alpine/qt5-qtwebengine@5.15.16-r6?arch=ppc64le&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/qt5-qtwebengine@5.15.16-r6?arch=ppc64le&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/qt5-qtwebengine@5.15.16-r6%3Farch=ppc64le&distroversion=v3.23&reponame=community
aliases CVE-2024-1077
risk_score 4.0
exploitability 0.5
weighted_severity 7.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8u9u-g38d-43dp
2
url VCID-d12j-e39j-jbcv
vulnerability_id VCID-d12j-e39j-jbcv
summary Use after free in Canvas in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-1060
reference_id
reference_type
scores
0
value 0.00279
scoring_system epss
scoring_elements 0.5165
published_at 2026-06-11T12:55:00Z
1
value 0.00279
scoring_system epss
scoring_elements 0.51779
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-1060
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1060
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1060
2
reference_url https://crbug.com/1511567
reference_id 1511567
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-05-08T20:28:29Z/
url https://crbug.com/1511567
3
reference_url https://security.gentoo.org/glsa/202402-23
reference_id GLSA-202402-23
reference_type
scores
url https://security.gentoo.org/glsa/202402-23
4
reference_url https://security.gentoo.org/glsa/202405-14
reference_id GLSA-202405-14
reference_type
scores
url https://security.gentoo.org/glsa/202405-14
5
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NEUXJY3YC3VGIJW2AOHL4NZ7ZK7BRYWY/
reference_id NEUXJY3YC3VGIJW2AOHL4NZ7ZK7BRYWY
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-05-08T20:28:29Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NEUXJY3YC3VGIJW2AOHL4NZ7ZK7BRYWY/
6
reference_url https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_30.html
reference_id stable-channel-update-for-desktop_30.html
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-05-08T20:28:29Z/
url https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_30.html
7
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XCVKRHRWPMITSVFBHQBSNXOVJAKT547Q/
reference_id XCVKRHRWPMITSVFBHQBSNXOVJAKT547Q
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-05-08T20:28:29Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XCVKRHRWPMITSVFBHQBSNXOVJAKT547Q/
fixed_packages
0
url pkg:apk/alpine/qt5-qtwebengine@5.15.16-r6?arch=ppc64le&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/qt5-qtwebengine@5.15.16-r6?arch=ppc64le&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/qt5-qtwebengine@5.15.16-r6%3Farch=ppc64le&distroversion=v3.23&reponame=community
aliases CVE-2024-1060
risk_score 4.0
exploitability 0.5
weighted_severity 7.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-d12j-e39j-jbcv
3
url VCID-db9m-fnxv-ubhn
vulnerability_id VCID-db9m-fnxv-ubhn
summary Use after free in Web Audio in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-0807
reference_id
reference_type
scores
0
value 0.002
scoring_system epss
scoring_elements 0.4209
published_at 2026-06-11T12:55:00Z
1
value 0.002
scoring_system epss
scoring_elements 0.42254
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-0807
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0807
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0807
2
reference_url https://crbug.com/1505080
reference_id 1505080
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-02-06T05:00:18Z/
url https://crbug.com/1505080
3
reference_url https://security.gentoo.org/glsa/202402-23
reference_id GLSA-202402-23
reference_type
scores
url https://security.gentoo.org/glsa/202402-23
4
reference_url https://security.gentoo.org/glsa/202405-14
reference_id GLSA-202405-14
reference_type
scores
url https://security.gentoo.org/glsa/202405-14
5
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMI6GXFONZV6HE3BPZO3AP6GUVQLG4JQ/
reference_id MMI6GXFONZV6HE3BPZO3AP6GUVQLG4JQ
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-02-06T05:00:18Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMI6GXFONZV6HE3BPZO3AP6GUVQLG4JQ/
6
reference_url https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html
reference_id stable-channel-update-for-desktop_23.html
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-02-06T05:00:18Z/
url https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html
7
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VXDSGAFQD4BDB4IB2O4ZUSHC3JCVQEKC/
reference_id VXDSGAFQD4BDB4IB2O4ZUSHC3JCVQEKC
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-02-06T05:00:18Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VXDSGAFQD4BDB4IB2O4ZUSHC3JCVQEKC/
fixed_packages
0
url pkg:apk/alpine/qt5-qtwebengine@5.15.16-r6?arch=ppc64le&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/qt5-qtwebengine@5.15.16-r6?arch=ppc64le&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/qt5-qtwebengine@5.15.16-r6%3Farch=ppc64le&distroversion=v3.23&reponame=community
aliases CVE-2024-0807
risk_score 4.0
exploitability 0.5
weighted_severity 7.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-db9m-fnxv-ubhn
4
url VCID-wtxm-dh6d-v3gh
vulnerability_id VCID-wtxm-dh6d-v3gh
summary Use after free in Peer Connection in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. (Chromium security severity: High)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-1059
reference_id
reference_type
scores
0
value 0.00553
scoring_system epss
scoring_elements 0.68513
published_at 2026-06-11T12:55:00Z
1
value 0.00553
scoring_system epss
scoring_elements 0.68602
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-1059
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1059
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1059
2
reference_url https://crbug.com/1514777
reference_id 1514777
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-02-13T05:00:34Z/
url https://crbug.com/1514777
3
reference_url https://security.gentoo.org/glsa/202402-23
reference_id GLSA-202402-23
reference_type
scores
url https://security.gentoo.org/glsa/202402-23
4
reference_url https://security.gentoo.org/glsa/202405-14
reference_id GLSA-202405-14
reference_type
scores
url https://security.gentoo.org/glsa/202405-14
5
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NEUXJY3YC3VGIJW2AOHL4NZ7ZK7BRYWY/
reference_id NEUXJY3YC3VGIJW2AOHL4NZ7ZK7BRYWY
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-02-13T05:00:34Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NEUXJY3YC3VGIJW2AOHL4NZ7ZK7BRYWY/
6
reference_url https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_30.html
reference_id stable-channel-update-for-desktop_30.html
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-02-13T05:00:34Z/
url https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_30.html
7
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XCVKRHRWPMITSVFBHQBSNXOVJAKT547Q/
reference_id XCVKRHRWPMITSVFBHQBSNXOVJAKT547Q
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-02-13T05:00:34Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XCVKRHRWPMITSVFBHQBSNXOVJAKT547Q/
fixed_packages
0
url pkg:apk/alpine/qt5-qtwebengine@5.15.16-r6?arch=ppc64le&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/qt5-qtwebengine@5.15.16-r6?arch=ppc64le&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/qt5-qtwebengine@5.15.16-r6%3Farch=ppc64le&distroversion=v3.23&reponame=community
aliases CVE-2024-1059
risk_score 4.0
exploitability 0.5
weighted_severity 7.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wtxm-dh6d-v3gh
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:apk/alpine/qt5-qtwebengine@5.15.16-r6%3Farch=ppc64le&distroversion=v3.23&reponame=community