{"url":"http://public2.vulnerablecode.io/api/packages/371119?format=json","purl":"pkg:alpm/archlinux/thunderbird@91.9.1-1","type":"alpm","namespace":"archlinux","name":"thunderbird","version":"91.9.1-1","qualifiers":{},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":"91.10-1","latest_non_vulnerable_version":"91.10-1","affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/31201?format=json","vulnerability_id":"VCID-17tt-jftn-m3bd","summary":"Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-31737.json","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-31737.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-31737","reference_id":"","reference_type":"","scores":[{"value":"0.00393","scoring_system":"epss","scoring_elements":"0.60187","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00393","scoring_system":"epss","scoring_elements":"0.60251","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00393","scoring_system":"epss","scoring_elements":"0.60237","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00393","scoring_system":"epss","scoring_elements":"0.60218","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00393","scoring_system":"epss","scoring_elements":"0.60286","published_at":"2026-04-18T12:55:00Z"},{"value":"0.00393","scoring_system":"epss","scoring_elements":"0.60279","published_at":"2026-04-16T12:55:00Z"},{"value":"0.00393","scoring_system":"epss","scoring_elements":"0.60193","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00393","scoring_system":"epss","scoring_elements":"0.60239","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00393","scoring_system":"epss","scoring_elements":"0.60258","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00393","scoring_system":"epss","scoring_elements":"0.60272","published_at":"2026-04-21T12:55:00Z"},{"value":"0.00418","scoring_system":"epss","scoring_elements":"0.61851","published_at":"2026-04-26T12:55:00Z"},{"value":"0.00418","scoring_system":"epss","scoring_elements":"0.61844","published_at":"2026-04-29T12:55:00Z"},{"value":"0.00418","scoring_system":"epss","scoring_elements":"0.61833","published_at":"2026-04-24T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-31737"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1529","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1529"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1802","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1802"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1834","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1834"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31736","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31736"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31737","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31737"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31738","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31738"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31740","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31740"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31741","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31741"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31742","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31742"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31747","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31747"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2092019","reference_id":"2092019","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2092019"},{"reference_url":"https://security.archlinux.org/AVG-2760","reference_id":"AVG-2760","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2760"},{"reference_url":"https://security.archlinux.org/AVG-2761","reference_id":"AVG-2761","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2761"},{"reference_url":"https://security.gentoo.org/glsa/202208-08","reference_id":"GLSA-202208-08","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202208-08"},{"reference_url":"https://security.gentoo.org/glsa/202208-14","reference_id":"GLSA-202208-14","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202208-14"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-20","reference_id":"mfsa2022-20","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-20"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2022-20/","reference_id":"mfsa2022-20","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-04-16T13:56:21Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2022-20/"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-21","reference_id":"mfsa2022-21","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-21"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2022-21/","reference_id":"mfsa2022-21","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-04-16T13:56:21Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2022-21/"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-22","reference_id":"mfsa2022-22","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-22"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2022-22/","reference_id":"mfsa2022-22","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-04-16T13:56:21Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2022-22/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4870","reference_id":"RHSA-2022:4870","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4870"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4871","reference_id":"RHSA-2022:4871","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4871"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4872","reference_id":"RHSA-2022:4872","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4872"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4873","reference_id":"RHSA-2022:4873","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4873"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4875","reference_id":"RHSA-2022:4875","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4875"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4876","reference_id":"RHSA-2022:4876","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4876"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4887","reference_id":"RHSA-2022:4887","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4887"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4888","reference_id":"RHSA-2022:4888","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4888"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4889","reference_id":"RHSA-2022:4889","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4889"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4890","reference_id":"RHSA-2022:4890","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4890"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4891","reference_id":"RHSA-2022:4891","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4891"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4892","reference_id":"RHSA-2022:4892","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4892"},{"reference_url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1743767","reference_id":"show_bug.cgi?id=1743767","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-04-16T13:56:21Z/"}],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1743767"},{"reference_url":"https://usn.ubuntu.com/5475-1/","reference_id":"USN-5475-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5475-1/"},{"reference_url":"https://usn.ubuntu.com/5512-1/","reference_id":"USN-5512-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5512-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/371687?format=json","purl":"pkg:alpm/archlinux/thunderbird@91.10-1","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/thunderbird@91.10-1"}],"aliases":["CVE-2022-31737"],"risk_score":4.4,"exploitability":"0.5","weighted_severity":"8.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-17tt-jftn-m3bd"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/31204?format=json","vulnerability_id":"VCID-2s85-r5tn-wucn","summary":"Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-31741.json","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-31741.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-31741","reference_id":"","reference_type":"","scores":[{"value":"0.00266","scoring_system":"epss","scoring_elements":"0.50102","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00266","scoring_system":"epss","scoring_elements":"0.50074","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00309","scoring_system":"epss","scoring_elements":"0.54107","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00309","scoring_system":"epss","scoring_elements":"0.5406","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00309","scoring_system":"epss","scoring_elements":"0.54096","published_at":"2026-04-21T12:55:00Z"},{"value":"0.00309","scoring_system":"epss","scoring_elements":"0.54115","published_at":"2026-04-18T12:55:00Z"},{"value":"0.00309","scoring_system":"epss","scoring_elements":"0.54008","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00309","scoring_system":"epss","scoring_elements":"0.54111","published_at":"2026-04-16T12:55:00Z"},{"value":"0.00309","scoring_system":"epss","scoring_elements":"0.54072","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00309","scoring_system":"epss","scoring_elements":"0.54089","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00329","scoring_system":"epss","scoring_elements":"0.5588","published_at":"2026-04-26T12:55:00Z"},{"value":"0.00329","scoring_system":"epss","scoring_elements":"0.55861","published_at":"2026-04-24T12:55:00Z"},{"value":"0.00329","scoring_system":"epss","scoring_elements":"0.55855","published_at":"2026-04-29T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-31741"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1529","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1529"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1802","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1802"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1834","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1834"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31736","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31736"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31737","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31737"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31738","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31738"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31740","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31740"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31741","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31741"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31742","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31742"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31747","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31747"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2092024","reference_id":"2092024","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2092024"},{"reference_url":"https://security.archlinux.org/AVG-2760","reference_id":"AVG-2760","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2760"},{"reference_url":"https://security.archlinux.org/AVG-2761","reference_id":"AVG-2761","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2761"},{"reference_url":"https://security.gentoo.org/glsa/202208-08","reference_id":"GLSA-202208-08","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202208-08"},{"reference_url":"https://security.gentoo.org/glsa/202208-14","reference_id":"GLSA-202208-14","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202208-14"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-20","reference_id":"mfsa2022-20","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-20"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2022-20/","reference_id":"mfsa2022-20","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-04-15T18:58:38Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2022-20/"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-21","reference_id":"mfsa2022-21","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-21"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2022-21/","reference_id":"mfsa2022-21","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-04-15T18:58:38Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2022-21/"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-22","reference_id":"mfsa2022-22","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-22"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2022-22/","reference_id":"mfsa2022-22","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-04-15T18:58:38Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2022-22/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4870","reference_id":"RHSA-2022:4870","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4870"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4871","reference_id":"RHSA-2022:4871","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4871"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4872","reference_id":"RHSA-2022:4872","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4872"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4873","reference_id":"RHSA-2022:4873","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4873"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4875","reference_id":"RHSA-2022:4875","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4875"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4876","reference_id":"RHSA-2022:4876","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4876"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4887","reference_id":"RHSA-2022:4887","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4887"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4888","reference_id":"RHSA-2022:4888","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4888"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4889","reference_id":"RHSA-2022:4889","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4889"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4890","reference_id":"RHSA-2022:4890","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4890"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4891","reference_id":"RHSA-2022:4891","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4891"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4892","reference_id":"RHSA-2022:4892","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4892"},{"reference_url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1767590","reference_id":"show_bug.cgi?id=1767590","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-04-15T18:58:38Z/"}],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1767590"},{"reference_url":"https://usn.ubuntu.com/5475-1/","reference_id":"USN-5475-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5475-1/"},{"reference_url":"https://usn.ubuntu.com/5512-1/","reference_id":"USN-5512-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5512-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/371687?format=json","purl":"pkg:alpm/archlinux/thunderbird@91.10-1","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/thunderbird@91.10-1"}],"aliases":["CVE-2022-31741"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-2s85-r5tn-wucn"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/31202?format=json","vulnerability_id":"VCID-5f8u-kf14-tkah","summary":"Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-31738.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-31738.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-31738","reference_id":"","reference_type":"","scores":[{"value":"0.00155","scoring_system":"epss","scoring_elements":"0.36227","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00155","scoring_system":"epss","scoring_elements":"0.36299","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00155","scoring_system":"epss","scoring_elements":"0.36276","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00155","scoring_system":"epss","scoring_elements":"0.36393","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00155","scoring_system":"epss","scoring_elements":"0.3622","published_at":"2026-04-21T12:55:00Z"},{"value":"0.00155","scoring_system":"epss","scoring_elements":"0.36271","published_at":"2026-04-18T12:55:00Z"},{"value":"0.00155","scoring_system":"epss","scoring_elements":"0.3636","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00155","scoring_system":"epss","scoring_elements":"0.36287","published_at":"2026-04-16T12:55:00Z"},{"value":"0.00155","scoring_system":"epss","scoring_elements":"0.36243","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00155","scoring_system":"epss","scoring_elements":"0.36268","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00155","scoring_system":"epss","scoring_elements":"0.36304","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00165","scoring_system":"epss","scoring_elements":"0.37294","published_at":"2026-04-26T12:55:00Z"},{"value":"0.00165","scoring_system":"epss","scoring_elements":"0.37204","published_at":"2026-04-29T12:55:00Z"},{"value":"0.00165","scoring_system":"epss","scoring_elements":"0.37315","published_at":"2026-04-24T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-31738"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1529","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1529"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1802","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1802"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1834","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1834"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31736","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31736"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31737","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31737"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31738","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31738"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31740","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31740"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31741","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31741"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31742","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31742"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31747","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31747"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2092021","reference_id":"2092021","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2092021"},{"reference_url":"https://security.archlinux.org/AVG-2760","reference_id":"AVG-2760","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2760"},{"reference_url":"https://security.archlinux.org/AVG-2761","reference_id":"AVG-2761","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2761"},{"reference_url":"https://security.gentoo.org/glsa/202208-08","reference_id":"GLSA-202208-08","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202208-08"},{"reference_url":"https://security.gentoo.org/glsa/202208-14","reference_id":"GLSA-202208-14","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202208-14"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-20","reference_id":"mfsa2022-20","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-20"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2022-20/","reference_id":"mfsa2022-20","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-16T13:54:02Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2022-20/"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-21","reference_id":"mfsa2022-21","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-21"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2022-21/","reference_id":"mfsa2022-21","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-16T13:54:02Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2022-21/"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-22","reference_id":"mfsa2022-22","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-22"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2022-22/","reference_id":"mfsa2022-22","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-16T13:54:02Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2022-22/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4870","reference_id":"RHSA-2022:4870","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4870"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4871","reference_id":"RHSA-2022:4871","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4871"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4872","reference_id":"RHSA-2022:4872","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4872"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4873","reference_id":"RHSA-2022:4873","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4873"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4875","reference_id":"RHSA-2022:4875","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4875"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4876","reference_id":"RHSA-2022:4876","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4876"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4887","reference_id":"RHSA-2022:4887","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4887"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4888","reference_id":"RHSA-2022:4888","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4888"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4889","reference_id":"RHSA-2022:4889","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4889"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4890","reference_id":"RHSA-2022:4890","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4890"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4891","reference_id":"RHSA-2022:4891","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4891"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4892","reference_id":"RHSA-2022:4892","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4892"},{"reference_url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1756388","reference_id":"show_bug.cgi?id=1756388","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-16T13:54:02Z/"}],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1756388"},{"reference_url":"https://usn.ubuntu.com/5475-1/","reference_id":"USN-5475-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5475-1/"},{"reference_url":"https://usn.ubuntu.com/5512-1/","reference_id":"USN-5512-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5512-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/371687?format=json","purl":"pkg:alpm/archlinux/thunderbird@91.10-1","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/thunderbird@91.10-1"}],"aliases":["CVE-2022-31738"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-5f8u-kf14-tkah"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/31206?format=json","vulnerability_id":"VCID-7acy-1dnk-pkcq","summary":"Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-31747.json","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-31747.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-31747","reference_id":"","reference_type":"","scores":[{"value":"0.00657","scoring_system":"epss","scoring_elements":"0.7112","published_at":"2026-04-29T12:55:00Z"},{"value":"0.00657","scoring_system":"epss","scoring_elements":"0.71116","published_at":"2026-04-26T12:55:00Z"},{"value":"0.00657","scoring_system":"epss","scoring_elements":"0.71107","published_at":"2026-04-24T12:55:00Z"},{"value":"0.00657","scoring_system":"epss","scoring_elements":"0.71051","published_at":"2026-04-21T12:55:00Z"},{"value":"0.00657","scoring_system":"epss","scoring_elements":"0.71071","published_at":"2026-04-18T12:55:00Z"},{"value":"0.00657","scoring_system":"epss","scoring_elements":"0.70978","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00657","scoring_system":"epss","scoring_elements":"0.71064","published_at":"2026-04-16T12:55:00Z"},{"value":"0.00657","scoring_system":"epss","scoring_elements":"0.71018","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00657","scoring_system":"epss","scoring_elements":"0.71035","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00657","scoring_system":"epss","scoring_elements":"0.7105","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00657","scoring_system":"epss","scoring_elements":"0.71027","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00657","scoring_system":"epss","scoring_elements":"0.71012","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00657","scoring_system":"epss","scoring_elements":"0.70995","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00657","scoring_system":"epss","scoring_elements":"0.7097","published_at":"2026-04-07T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-31747"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1529","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1529"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1802","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1802"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1834","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1834"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31736","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31736"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31737","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31737"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31738","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31738"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31740","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31740"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31741","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31741"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31742","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31742"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31747","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31747"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2092026","reference_id":"2092026","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2092026"},{"reference_url":"https://security.archlinux.org/AVG-2760","reference_id":"AVG-2760","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2760"},{"reference_url":"https://security.archlinux.org/AVG-2761","reference_id":"AVG-2761","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2761"},{"reference_url":"https://bugzilla.mozilla.org/buglist.cgi?bug_id=1760765%2C1765610%2C1766283%2C1767365%2C1768559%2C1768734","reference_id":"buglist.cgi?bug_id=1760765%2C1765610%2C1766283%2C1767365%2C1768559%2C1768734","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-15T18:22:36Z/"}],"url":"https://bugzilla.mozilla.org/buglist.cgi?bug_id=1760765%2C1765610%2C1766283%2C1767365%2C1768559%2C1768734"},{"reference_url":"https://security.gentoo.org/glsa/202208-08","reference_id":"GLSA-202208-08","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202208-08"},{"reference_url":"https://security.gentoo.org/glsa/202208-14","reference_id":"GLSA-202208-14","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202208-14"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-20","reference_id":"mfsa2022-20","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-20"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2022-20/","reference_id":"mfsa2022-20","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-15T18:22:36Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2022-20/"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-21","reference_id":"mfsa2022-21","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-21"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2022-21/","reference_id":"mfsa2022-21","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-15T18:22:36Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2022-21/"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-22","reference_id":"mfsa2022-22","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-22"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2022-22/","reference_id":"mfsa2022-22","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-15T18:22:36Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2022-22/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4870","reference_id":"RHSA-2022:4870","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4870"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4871","reference_id":"RHSA-2022:4871","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4871"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4872","reference_id":"RHSA-2022:4872","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4872"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4873","reference_id":"RHSA-2022:4873","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4873"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4875","reference_id":"RHSA-2022:4875","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4875"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4876","reference_id":"RHSA-2022:4876","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4876"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4887","reference_id":"RHSA-2022:4887","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4887"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4888","reference_id":"RHSA-2022:4888","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4888"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4889","reference_id":"RHSA-2022:4889","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4889"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4890","reference_id":"RHSA-2022:4890","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4890"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4891","reference_id":"RHSA-2022:4891","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4891"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4892","reference_id":"RHSA-2022:4892","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4892"},{"reference_url":"https://usn.ubuntu.com/5475-1/","reference_id":"USN-5475-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5475-1/"},{"reference_url":"https://usn.ubuntu.com/5512-1/","reference_id":"USN-5512-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5512-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/371687?format=json","purl":"pkg:alpm/archlinux/thunderbird@91.10-1","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/thunderbird@91.10-1"}],"aliases":["CVE-2022-31747"],"risk_score":4.4,"exploitability":"0.5","weighted_severity":"8.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-7acy-1dnk-pkcq"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/31205?format=json","vulnerability_id":"VCID-9tdt-84zg-3fd7","summary":"Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-31742.json","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-31742.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-31742","reference_id":"","reference_type":"","scores":[{"value":"0.00357","scoring_system":"epss","scoring_elements":"0.57959","published_at":"2026-04-29T12:55:00Z"},{"value":"0.00357","scoring_system":"epss","scoring_elements":"0.57976","published_at":"2026-04-26T12:55:00Z"},{"value":"0.00357","scoring_system":"epss","scoring_elements":"0.5796","published_at":"2026-04-24T12:55:00Z"},{"value":"0.00357","scoring_system":"epss","scoring_elements":"0.57996","published_at":"2026-04-21T12:55:00Z"},{"value":"0.00357","scoring_system":"epss","scoring_elements":"0.58018","published_at":"2026-04-18T12:55:00Z"},{"value":"0.00357","scoring_system":"epss","scoring_elements":"0.57963","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00357","scoring_system":"epss","scoring_elements":"0.5802","published_at":"2026-04-16T12:55:00Z"},{"value":"0.00357","scoring_system":"epss","scoring_elements":"0.57989","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00357","scoring_system":"epss","scoring_elements":"0.5801","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00357","scoring_system":"epss","scoring_elements":"0.58031","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00357","scoring_system":"epss","scoring_elements":"0.58015","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00357","scoring_system":"epss","scoring_elements":"0.58013","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00357","scoring_system":"epss","scoring_elements":"0.57982","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00357","scoring_system":"epss","scoring_elements":"0.57958","published_at":"2026-04-07T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-31742"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1529","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1529"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1802","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1802"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1834","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1834"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31736","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31736"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31737","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31737"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31738","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31738"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31740","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31740"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31741","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31741"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31742","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31742"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31747","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31747"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2092025","reference_id":"2092025","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2092025"},{"reference_url":"https://security.archlinux.org/AVG-2760","reference_id":"AVG-2760","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2760"},{"reference_url":"https://security.archlinux.org/AVG-2761","reference_id":"AVG-2761","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2761"},{"reference_url":"https://security.gentoo.org/glsa/202208-08","reference_id":"GLSA-202208-08","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202208-08"},{"reference_url":"https://security.gentoo.org/glsa/202208-14","reference_id":"GLSA-202208-14","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202208-14"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-20","reference_id":"mfsa2022-20","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-20"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2022-20/","reference_id":"mfsa2022-20","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-15T18:36:32Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2022-20/"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-21","reference_id":"mfsa2022-21","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-21"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2022-21/","reference_id":"mfsa2022-21","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-15T18:36:32Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2022-21/"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-22","reference_id":"mfsa2022-22","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-22"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2022-22/","reference_id":"mfsa2022-22","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-15T18:36:32Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2022-22/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4870","reference_id":"RHSA-2022:4870","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4870"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4871","reference_id":"RHSA-2022:4871","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4871"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4872","reference_id":"RHSA-2022:4872","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4872"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4873","reference_id":"RHSA-2022:4873","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4873"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4875","reference_id":"RHSA-2022:4875","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4875"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4876","reference_id":"RHSA-2022:4876","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4876"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4887","reference_id":"RHSA-2022:4887","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4887"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4888","reference_id":"RHSA-2022:4888","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4888"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4889","reference_id":"RHSA-2022:4889","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4889"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4890","reference_id":"RHSA-2022:4890","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4890"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4891","reference_id":"RHSA-2022:4891","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4891"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4892","reference_id":"RHSA-2022:4892","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4892"},{"reference_url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1730434","reference_id":"show_bug.cgi?id=1730434","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-15T18:36:32Z/"}],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1730434"},{"reference_url":"https://usn.ubuntu.com/5475-1/","reference_id":"USN-5475-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5475-1/"},{"reference_url":"https://usn.ubuntu.com/5512-1/","reference_id":"USN-5512-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5512-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/371687?format=json","purl":"pkg:alpm/archlinux/thunderbird@91.10-1","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/thunderbird@91.10-1"}],"aliases":["CVE-2022-31742"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-9tdt-84zg-3fd7"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/31156?format=json","vulnerability_id":"VCID-sgc4-z5aa-nkct","summary":"Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-1834.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-1834.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-1834","reference_id":"","reference_type":"","scores":[{"value":"0.00173","scoring_system":"epss","scoring_elements":"0.38595","published_at":"2026-04-01T12:55:00Z"},{"value":"0.00173","scoring_system":"epss","scoring_elements":"0.3836","published_at":"2026-04-29T12:55:00Z"},{"value":"0.00173","scoring_system":"epss","scoring_elements":"0.38747","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00173","scoring_system":"epss","scoring_elements":"0.38709","published_at":"2026-04-18T12:55:00Z"},{"value":"0.00173","scoring_system":"epss","scoring_elements":"0.38683","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00173","scoring_system":"epss","scoring_elements":"0.3873","published_at":"2026-04-16T12:55:00Z"},{"value":"0.00173","scoring_system":"epss","scoring_elements":"0.3863","published_at":"2026-04-21T12:55:00Z"},{"value":"0.00173","scoring_system":"epss","scoring_elements":"0.38475","published_at":"2026-04-24T12:55:00Z"},{"value":"0.00173","scoring_system":"epss","scoring_elements":"0.3845","published_at":"2026-04-26T12:55:00Z"},{"value":"0.00173","scoring_system":"epss","scoring_elements":"0.38724","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00173","scoring_system":"epss","scoring_elements":"0.38746","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00173","scoring_system":"epss","scoring_elements":"0.38675","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00173","scoring_system":"epss","scoring_elements":"0.38726","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00173","scoring_system":"epss","scoring_elements":"0.38736","published_at":"2026-04-09T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-1834"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1529","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1529"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1802","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1802"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1834","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1834"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31736","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31736"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31737","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31737"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31738","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31738"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31740","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31740"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31741","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31741"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31742","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31742"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31747","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31747"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2092416","reference_id":"2092416","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2092416"},{"reference_url":"https://security.archlinux.org/AVG-2761","reference_id":"AVG-2761","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2761"},{"reference_url":"https://security.gentoo.org/glsa/202208-14","reference_id":"GLSA-202208-14","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202208-14"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-22","reference_id":"mfsa2022-22","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-22"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2022-22/","reference_id":"mfsa2022-22","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-16T15:15:11Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2022-22/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4887","reference_id":"RHSA-2022:4887","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4887"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4888","reference_id":"RHSA-2022:4888","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4888"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4889","reference_id":"RHSA-2022:4889","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4889"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4890","reference_id":"RHSA-2022:4890","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4890"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4891","reference_id":"RHSA-2022:4891","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4891"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4892","reference_id":"RHSA-2022:4892","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4892"},{"reference_url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1767816","reference_id":"show_bug.cgi?id=1767816","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-16T15:15:11Z/"}],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1767816"},{"reference_url":"https://usn.ubuntu.com/5512-1/","reference_id":"USN-5512-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5512-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/371687?format=json","purl":"pkg:alpm/archlinux/thunderbird@91.10-1","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/thunderbird@91.10-1"}],"aliases":["CVE-2022-1834"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-sgc4-z5aa-nkct"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/31200?format=json","vulnerability_id":"VCID-vg6v-8pv2-mfhf","summary":"Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-31736.json","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-31736.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-31736","reference_id":"","reference_type":"","scores":[{"value":"0.00215","scoring_system":"epss","scoring_elements":"0.43953","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00215","scoring_system":"epss","scoring_elements":"0.44006","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00215","scoring_system":"epss","scoring_elements":"0.44004","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00215","scoring_system":"epss","scoring_elements":"0.44023","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00215","scoring_system":"epss","scoring_elements":"0.4396","published_at":"2026-04-21T12:55:00Z"},{"value":"0.00215","scoring_system":"epss","scoring_elements":"0.44026","published_at":"2026-04-18T12:55:00Z"},{"value":"0.00215","scoring_system":"epss","scoring_elements":"0.44","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00215","scoring_system":"epss","scoring_elements":"0.44035","published_at":"2026-04-16T12:55:00Z"},{"value":"0.00215","scoring_system":"epss","scoring_elements":"0.43973","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00215","scoring_system":"epss","scoring_elements":"0.43989","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00215","scoring_system":"epss","scoring_elements":"0.44021","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00229","scoring_system":"epss","scoring_elements":"0.45565","published_at":"2026-04-26T12:55:00Z"},{"value":"0.00229","scoring_system":"epss","scoring_elements":"0.45505","published_at":"2026-04-29T12:55:00Z"},{"value":"0.00229","scoring_system":"epss","scoring_elements":"0.45557","published_at":"2026-04-24T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-31736"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1529","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1529"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1802","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1802"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1834","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1834"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31736","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31736"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31737","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31737"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31738","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31738"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31740","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31740"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31741","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31741"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31742","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31742"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31747","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31747"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2092018","reference_id":"2092018","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2092018"},{"reference_url":"https://security.archlinux.org/AVG-2760","reference_id":"AVG-2760","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2760"},{"reference_url":"https://security.archlinux.org/AVG-2761","reference_id":"AVG-2761","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2761"},{"reference_url":"https://security.gentoo.org/glsa/202208-08","reference_id":"GLSA-202208-08","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202208-08"},{"reference_url":"https://security.gentoo.org/glsa/202208-14","reference_id":"GLSA-202208-14","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202208-14"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-20","reference_id":"mfsa2022-20","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-20"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2022-20/","reference_id":"mfsa2022-20","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-15T14:56:54Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2022-20/"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-21","reference_id":"mfsa2022-21","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-21"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2022-21/","reference_id":"mfsa2022-21","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-15T14:56:54Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2022-21/"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-22","reference_id":"mfsa2022-22","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-22"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2022-22/","reference_id":"mfsa2022-22","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-15T14:56:54Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2022-22/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4870","reference_id":"RHSA-2022:4870","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4870"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4871","reference_id":"RHSA-2022:4871","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4871"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4872","reference_id":"RHSA-2022:4872","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4872"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4873","reference_id":"RHSA-2022:4873","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4873"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4875","reference_id":"RHSA-2022:4875","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4875"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4876","reference_id":"RHSA-2022:4876","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4876"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4887","reference_id":"RHSA-2022:4887","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4887"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4888","reference_id":"RHSA-2022:4888","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4888"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4889","reference_id":"RHSA-2022:4889","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4889"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4890","reference_id":"RHSA-2022:4890","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4890"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4891","reference_id":"RHSA-2022:4891","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4891"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4892","reference_id":"RHSA-2022:4892","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4892"},{"reference_url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1735923","reference_id":"show_bug.cgi?id=1735923","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-15T14:56:54Z/"}],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1735923"},{"reference_url":"https://usn.ubuntu.com/5475-1/","reference_id":"USN-5475-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5475-1/"},{"reference_url":"https://usn.ubuntu.com/5512-1/","reference_id":"USN-5512-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5512-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/371687?format=json","purl":"pkg:alpm/archlinux/thunderbird@91.10-1","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/thunderbird@91.10-1"}],"aliases":["CVE-2022-31736"],"risk_score":4.4,"exploitability":"0.5","weighted_severity":"8.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-vg6v-8pv2-mfhf"}],"fixing_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/31153?format=json","vulnerability_id":"VCID-27hw-egkx-w7d4","summary":"Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-1529.json","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-1529.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-1529","reference_id":"","reference_type":"","scores":[{"value":"0.04295","scoring_system":"epss","scoring_elements":"0.88813","published_at":"2026-04-01T12:55:00Z"},{"value":"0.04295","scoring_system":"epss","scoring_elements":"0.88902","published_at":"2026-04-29T12:55:00Z"},{"value":"0.04295","scoring_system":"epss","scoring_elements":"0.88863","published_at":"2026-04-09T12:55:00Z"},{"value":"0.04295","scoring_system":"epss","scoring_elements":"0.88875","published_at":"2026-04-11T12:55:00Z"},{"value":"0.04295","scoring_system":"epss","scoring_elements":"0.8887","published_at":"2026-04-13T12:55:00Z"},{"value":"0.04295","scoring_system":"epss","scoring_elements":"0.88883","published_at":"2026-04-16T12:55:00Z"},{"value":"0.04295","scoring_system":"epss","scoring_elements":"0.88881","published_at":"2026-04-18T12:55:00Z"},{"value":"0.04295","scoring_system":"epss","scoring_elements":"0.88878","published_at":"2026-04-21T12:55:00Z"},{"value":"0.04295","scoring_system":"epss","scoring_elements":"0.88895","published_at":"2026-04-24T12:55:00Z"},{"value":"0.04295","scoring_system":"epss","scoring_elements":"0.88901","published_at":"2026-04-26T12:55:00Z"},{"value":"0.04295","scoring_system":"epss","scoring_elements":"0.88822","published_at":"2026-04-02T12:55:00Z"},{"value":"0.04295","scoring_system":"epss","scoring_elements":"0.88838","published_at":"2026-04-04T12:55:00Z"},{"value":"0.04295","scoring_system":"epss","scoring_elements":"0.88841","published_at":"2026-04-07T12:55:00Z"},{"value":"0.04295","scoring_system":"epss","scoring_elements":"0.88858","published_at":"2026-04-08T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-1529"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1529","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1529"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1802","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1802"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1834","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1834"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31736","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31736"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31737","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31737"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31738","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31738"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31740","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31740"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31741","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31741"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31742","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31742"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31747","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31747"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2089218","reference_id":"2089218","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2089218"},{"reference_url":"https://security.archlinux.org/AVG-2728","reference_id":"AVG-2728","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2728"},{"reference_url":"https://security.archlinux.org/AVG-2729","reference_id":"AVG-2729","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2729"},{"reference_url":"https://security.gentoo.org/glsa/202208-08","reference_id":"GLSA-202208-08","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202208-08"},{"reference_url":"https://security.gentoo.org/glsa/202208-14","reference_id":"GLSA-202208-14","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202208-14"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-19","reference_id":"mfsa2022-19","reference_type":"","scores":[{"value":"critical","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-19"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2022-19/","reference_id":"mfsa2022-19","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-16T15:19:19Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2022-19/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4729","reference_id":"RHSA-2022:4729","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4729"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4730","reference_id":"RHSA-2022:4730","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4730"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4765","reference_id":"RHSA-2022:4765","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4765"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4766","reference_id":"RHSA-2022:4766","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4766"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4767","reference_id":"RHSA-2022:4767","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4767"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4768","reference_id":"RHSA-2022:4768","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4768"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4769","reference_id":"RHSA-2022:4769","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4769"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4770","reference_id":"RHSA-2022:4770","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4770"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4772","reference_id":"RHSA-2022:4772","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4772"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4773","reference_id":"RHSA-2022:4773","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4773"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4774","reference_id":"RHSA-2022:4774","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4774"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4776","reference_id":"RHSA-2022:4776","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4776"},{"reference_url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1770048","reference_id":"show_bug.cgi?id=1770048","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-16T15:19:19Z/"}],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1770048"},{"reference_url":"https://usn.ubuntu.com/5434-1/","reference_id":"USN-5434-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5434-1/"},{"reference_url":"https://usn.ubuntu.com/5435-1/","reference_id":"USN-5435-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5435-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/371119?format=json","purl":"pkg:alpm/archlinux/thunderbird@91.9.1-1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-17tt-jftn-m3bd"},{"vulnerability":"VCID-2s85-r5tn-wucn"},{"vulnerability":"VCID-5f8u-kf14-tkah"},{"vulnerability":"VCID-7acy-1dnk-pkcq"},{"vulnerability":"VCID-9tdt-84zg-3fd7"},{"vulnerability":"VCID-sgc4-z5aa-nkct"},{"vulnerability":"VCID-vg6v-8pv2-mfhf"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/thunderbird@91.9.1-1"}],"aliases":["CVE-2022-1529"],"risk_score":4.5,"exploitability":"0.5","weighted_severity":"9.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-27hw-egkx-w7d4"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/31155?format=json","vulnerability_id":"VCID-9tkb-9fch-67bc","summary":"Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-1802.json","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-1802.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-1802","reference_id":"","reference_type":"","scores":[{"value":"0.67932","scoring_system":"epss","scoring_elements":"0.98576","published_at":"2026-04-01T12:55:00Z"},{"value":"0.67932","scoring_system":"epss","scoring_elements":"0.98601","published_at":"2026-04-29T12:55:00Z"},{"value":"0.67932","scoring_system":"epss","scoring_elements":"0.98586","published_at":"2026-04-08T12:55:00Z"},{"value":"0.67932","scoring_system":"epss","scoring_elements":"0.98587","published_at":"2026-04-09T12:55:00Z"},{"value":"0.67932","scoring_system":"epss","scoring_elements":"0.98589","published_at":"2026-04-12T12:55:00Z"},{"value":"0.67932","scoring_system":"epss","scoring_elements":"0.98591","published_at":"2026-04-13T12:55:00Z"},{"value":"0.67932","scoring_system":"epss","scoring_elements":"0.98595","published_at":"2026-04-21T12:55:00Z"},{"value":"0.67932","scoring_system":"epss","scoring_elements":"0.98597","published_at":"2026-04-18T12:55:00Z"},{"value":"0.67932","scoring_system":"epss","scoring_elements":"0.98599","published_at":"2026-04-24T12:55:00Z"},{"value":"0.67932","scoring_system":"epss","scoring_elements":"0.986","published_at":"2026-04-26T12:55:00Z"},{"value":"0.67932","scoring_system":"epss","scoring_elements":"0.98578","published_at":"2026-04-02T12:55:00Z"},{"value":"0.67932","scoring_system":"epss","scoring_elements":"0.98581","published_at":"2026-04-04T12:55:00Z"},{"value":"0.67932","scoring_system":"epss","scoring_elements":"0.98583","published_at":"2026-04-07T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-1802"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1529","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1529"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1802","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1802"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1834","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1834"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31736","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31736"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31737","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31737"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31738","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31738"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31740","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31740"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31741","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31741"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31742","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31742"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31747","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31747"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2089217","reference_id":"2089217","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2089217"},{"reference_url":"https://security.archlinux.org/AVG-2728","reference_id":"AVG-2728","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2728"},{"reference_url":"https://security.archlinux.org/AVG-2729","reference_id":"AVG-2729","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2729"},{"reference_url":"https://security.gentoo.org/glsa/202208-08","reference_id":"GLSA-202208-08","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202208-08"},{"reference_url":"https://security.gentoo.org/glsa/202208-14","reference_id":"GLSA-202208-14","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202208-14"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-19","reference_id":"mfsa2022-19","reference_type":"","scores":[{"value":"critical","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2022-19"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2022-19/","reference_id":"mfsa2022-19","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-04-16T15:16:27Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2022-19/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4729","reference_id":"RHSA-2022:4729","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4729"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4730","reference_id":"RHSA-2022:4730","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4730"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4765","reference_id":"RHSA-2022:4765","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4765"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4766","reference_id":"RHSA-2022:4766","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4766"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4767","reference_id":"RHSA-2022:4767","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4767"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4768","reference_id":"RHSA-2022:4768","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4768"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4769","reference_id":"RHSA-2022:4769","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4769"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4770","reference_id":"RHSA-2022:4770","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4770"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4772","reference_id":"RHSA-2022:4772","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4772"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4773","reference_id":"RHSA-2022:4773","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4773"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4774","reference_id":"RHSA-2022:4774","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4774"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:4776","reference_id":"RHSA-2022:4776","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:4776"},{"reference_url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1770137","reference_id":"show_bug.cgi?id=1770137","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-04-16T15:16:27Z/"}],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1770137"},{"reference_url":"https://usn.ubuntu.com/5434-1/","reference_id":"USN-5434-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5434-1/"},{"reference_url":"https://usn.ubuntu.com/5435-1/","reference_id":"USN-5435-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5435-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/371119?format=json","purl":"pkg:alpm/archlinux/thunderbird@91.9.1-1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-17tt-jftn-m3bd"},{"vulnerability":"VCID-2s85-r5tn-wucn"},{"vulnerability":"VCID-5f8u-kf14-tkah"},{"vulnerability":"VCID-7acy-1dnk-pkcq"},{"vulnerability":"VCID-9tdt-84zg-3fd7"},{"vulnerability":"VCID-sgc4-z5aa-nkct"},{"vulnerability":"VCID-vg6v-8pv2-mfhf"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/thunderbird@91.9.1-1"}],"aliases":["CVE-2022-1802"],"risk_score":4.5,"exploitability":"0.5","weighted_severity":"9.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-9tkb-9fch-67bc"}],"risk_score":"4.4","resource_url":"http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/thunderbird@91.9.1-1"}