Lookup for vulnerable packages by Package URL.

Purlpkg:apk/alpine/xen@4.19.2-r1?arch=riscv64&distroversion=v3.21&reponame=main
Typeapk
Namespacealpine
Namexen
Version4.19.2-r1
Qualifiers
arch riscv64
distroversion v3.21
reponame main
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version4.19.2-r2
Latest_non_vulnerable_version4.19.5-r3
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-kpyj-6qpe-pbep
vulnerability_id VCID-kpyj-6qpe-pbep
summary Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-28956.json
reference_id
reference_type
scores
0
value 5.6
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-28956.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-28956
reference_id
reference_type
scores
0
value 0.00249
scoring_system epss
scoring_elements 0.48383
published_at 2026-06-09T12:55:00Z
1
value 0.00249
scoring_system epss
scoring_elements 0.48415
published_at 2026-06-05T12:55:00Z
2
value 0.00249
scoring_system epss
scoring_elements 0.48419
published_at 2026-06-06T12:55:00Z
3
value 0.00249
scoring_system epss
scoring_elements 0.484
published_at 2026-06-07T12:55:00Z
4
value 0.00249
scoring_system epss
scoring_elements 0.48371
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-28956
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28956
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28956
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1105172
reference_id 1105172
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1105172
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1105193
reference_id 1105193
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1105193
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2366125
reference_id 2366125
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2366125
7
reference_url https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html
reference_id intel-sa-01153.html
reference_type
scores
0
value 5.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value 5.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-14T14:42:03Z/
url https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html
8
reference_url https://access.redhat.com/errata/RHSA-2025:10101
reference_id RHSA-2025:10101
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:10101
9
reference_url https://access.redhat.com/errata/RHSA-2025:10102
reference_id RHSA-2025:10102
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:10102
10
reference_url https://access.redhat.com/errata/RHSA-2025:10103
reference_id RHSA-2025:10103
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:10103
11
reference_url https://access.redhat.com/errata/RHSA-2025:10107
reference_id RHSA-2025:10107
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:10107
12
reference_url https://access.redhat.com/errata/RHSA-2025:10108
reference_id RHSA-2025:10108
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:10108
13
reference_url https://access.redhat.com/errata/RHSA-2025:10109
reference_id RHSA-2025:10109
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:10109
14
reference_url https://access.redhat.com/errata/RHSA-2025:10111
reference_id RHSA-2025:10111
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:10111
15
reference_url https://access.redhat.com/errata/RHSA-2025:10126
reference_id RHSA-2025:10126
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:10126
16
reference_url https://access.redhat.com/errata/RHSA-2025:10162
reference_id RHSA-2025:10162
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:10162
17
reference_url https://access.redhat.com/errata/RHSA-2025:10991
reference_id RHSA-2025:10991
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:10991
18
reference_url https://access.redhat.com/errata/RHSA-2025:13962
reference_id RHSA-2025:13962
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:13962
19
reference_url https://access.redhat.com/errata/RHSA-2025:19962
reference_id RHSA-2025:19962
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19962
20
reference_url https://access.redhat.com/errata/RHSA-2025:20095
reference_id RHSA-2025:20095
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:20095
21
reference_url https://usn.ubuntu.com/7535-1/
reference_id USN-7535-1
reference_type
scores
url https://usn.ubuntu.com/7535-1/
22
reference_url https://xenbits.xen.org/xsa/advisory-469.html
reference_id XSA-469
reference_type
scores
url https://xenbits.xen.org/xsa/advisory-469.html
fixed_packages
0
url pkg:apk/alpine/xen@4.19.2-r1?arch=riscv64&distroversion=v3.21&reponame=main
purl pkg:apk/alpine/xen@4.19.2-r1?arch=riscv64&distroversion=v3.21&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/xen@4.19.2-r1%3Farch=riscv64&distroversion=v3.21&reponame=main
aliases CVE-2024-28956, XSA-469
risk_score 2.5
exploitability 0.5
weighted_severity 5.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kpyj-6qpe-pbep
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:apk/alpine/xen@4.19.2-r1%3Farch=riscv64&distroversion=v3.21&reponame=main