Lookup for vulnerable packages by Package URL.

Purlpkg:apk/alpine/firefox-esr@68.6.1-r0?arch=armv7&distroversion=v3.22&reponame=community
Typeapk
Namespacealpine
Namefirefox-esr
Version68.6.1-r0
Qualifiers
arch armv7
distroversion v3.22
reponame community
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version68.7.0-r0
Latest_non_vulnerable_version115.6.0-r0
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-2hg5-57c1-z7gx
vulnerability_id VCID-2hg5-57c1-z7gx
summary Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6819.json
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6819.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-6819
reference_id
reference_type
scores
0
value 0.00363
scoring_system epss
scoring_elements 0.58716
published_at 2026-06-08T12:55:00Z
1
value 0.00363
scoring_system epss
scoring_elements 0.5873
published_at 2026-06-09T12:55:00Z
2
value 0.00363
scoring_system epss
scoring_elements 0.58733
published_at 2026-06-05T12:55:00Z
3
value 0.00363
scoring_system epss
scoring_elements 0.58738
published_at 2026-06-06T12:55:00Z
4
value 0.00363
scoring_system epss
scoring_elements 0.58686
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-6819
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6819
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6819
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6820
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6820
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6821
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6821
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6822
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6822
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6825
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6825
7
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1820869
reference_id 1820869
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1820869
9
reference_url https://usn.ubuntu.com/4335-1/
reference_id 4335-1
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-07T12:49:39Z/
url https://usn.ubuntu.com/4335-1/
10
reference_url https://security.archlinux.org/ASA-202004-12
reference_id ASA-202004-12
reference_type
scores
url https://security.archlinux.org/ASA-202004-12
11
reference_url https://security.archlinux.org/ASA-202004-6
reference_id ASA-202004-6
reference_type
scores
url https://security.archlinux.org/ASA-202004-6
12
reference_url https://security.archlinux.org/AVG-1125
reference_id AVG-1125
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1125
13
reference_url https://security.archlinux.org/AVG-1132
reference_id AVG-1132
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1132
14
reference_url https://security.gentoo.org/glsa/202004-07
reference_id GLSA-202004-07
reference_type
scores
url https://security.gentoo.org/glsa/202004-07
15
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2020-11
reference_id mfsa2020-11
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2020-11
16
reference_url https://www.mozilla.org/security/advisories/mfsa2020-11/
reference_id mfsa2020-11
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-07T12:49:39Z/
url https://www.mozilla.org/security/advisories/mfsa2020-11/
17
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2020-14
reference_id mfsa2020-14
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2020-14
18
reference_url https://www.mozilla.org/security/advisories/mfsa2020-14/
reference_id mfsa2020-14
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-07T12:49:39Z/
url https://www.mozilla.org/security/advisories/mfsa2020-14/
19
reference_url https://access.redhat.com/errata/RHSA-2020:1338
reference_id RHSA-2020:1338
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1338
20
reference_url https://access.redhat.com/errata/RHSA-2020:1339
reference_id RHSA-2020:1339
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1339
21
reference_url https://access.redhat.com/errata/RHSA-2020:1340
reference_id RHSA-2020:1340
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1340
22
reference_url https://access.redhat.com/errata/RHSA-2020:1341
reference_id RHSA-2020:1341
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1341
23
reference_url https://access.redhat.com/errata/RHSA-2020:1488
reference_id RHSA-2020:1488
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1488
24
reference_url https://access.redhat.com/errata/RHSA-2020:1489
reference_id RHSA-2020:1489
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1489
25
reference_url https://access.redhat.com/errata/RHSA-2020:1495
reference_id RHSA-2020:1495
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1495
26
reference_url https://access.redhat.com/errata/RHSA-2020:1496
reference_id RHSA-2020:1496
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1496
27
reference_url https://bugzilla.mozilla.org/show_bug.cgi?id=1620818
reference_id show_bug.cgi?id=1620818
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-07T12:49:39Z/
url https://bugzilla.mozilla.org/show_bug.cgi?id=1620818
28
reference_url https://usn.ubuntu.com/4317-1/
reference_id USN-4317-1
reference_type
scores
url https://usn.ubuntu.com/4317-1/
29
reference_url https://usn.ubuntu.com/4328-1/
reference_id USN-4328-1
reference_type
scores
url https://usn.ubuntu.com/4328-1/
fixed_packages
0
url pkg:apk/alpine/firefox-esr@68.6.1-r0?arch=armv7&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/firefox-esr@68.6.1-r0?arch=armv7&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/firefox-esr@68.6.1-r0%3Farch=armv7&distroversion=v3.22&reponame=community
aliases CVE-2020-6819
risk_score 10.0
exploitability 2.0
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2hg5-57c1-z7gx
1
url VCID-2v5h-3qba-k3gx
vulnerability_id VCID-2v5h-3qba-k3gx
summary Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6820.json
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6820.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-6820
reference_id
reference_type
scores
0
value 0.0313
scoring_system epss
scoring_elements 0.87115
published_at 2026-06-07T12:55:00Z
1
value 0.0313
scoring_system epss
scoring_elements 0.87111
published_at 2026-06-08T12:55:00Z
2
value 0.0313
scoring_system epss
scoring_elements 0.87122
published_at 2026-06-09T12:55:00Z
3
value 0.0313
scoring_system epss
scoring_elements 0.8712
published_at 2026-06-06T12:55:00Z
4
value 0.0313
scoring_system epss
scoring_elements 0.871
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-6820
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6819
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6819
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6820
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6820
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6821
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6821
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6822
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6822
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6825
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6825
7
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1820878
reference_id 1820878
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1820878
9
reference_url https://usn.ubuntu.com/4335-1/
reference_id 4335-1
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-07T12:49:16Z/
url https://usn.ubuntu.com/4335-1/
10
reference_url https://security.archlinux.org/ASA-202004-12
reference_id ASA-202004-12
reference_type
scores
url https://security.archlinux.org/ASA-202004-12
11
reference_url https://security.archlinux.org/ASA-202004-6
reference_id ASA-202004-6
reference_type
scores
url https://security.archlinux.org/ASA-202004-6
12
reference_url https://security.archlinux.org/AVG-1125
reference_id AVG-1125
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1125
13
reference_url https://security.archlinux.org/AVG-1132
reference_id AVG-1132
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1132
14
reference_url https://security.gentoo.org/glsa/202004-07
reference_id GLSA-202004-07
reference_type
scores
url https://security.gentoo.org/glsa/202004-07
15
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2020-11
reference_id mfsa2020-11
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2020-11
16
reference_url https://www.mozilla.org/security/advisories/mfsa2020-11/
reference_id mfsa2020-11
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-07T12:49:16Z/
url https://www.mozilla.org/security/advisories/mfsa2020-11/
17
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2020-14
reference_id mfsa2020-14
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2020-14
18
reference_url https://www.mozilla.org/security/advisories/mfsa2020-14/
reference_id mfsa2020-14
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-07T12:49:16Z/
url https://www.mozilla.org/security/advisories/mfsa2020-14/
19
reference_url https://access.redhat.com/errata/RHSA-2020:1338
reference_id RHSA-2020:1338
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1338
20
reference_url https://access.redhat.com/errata/RHSA-2020:1339
reference_id RHSA-2020:1339
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1339
21
reference_url https://access.redhat.com/errata/RHSA-2020:1340
reference_id RHSA-2020:1340
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1340
22
reference_url https://access.redhat.com/errata/RHSA-2020:1341
reference_id RHSA-2020:1341
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1341
23
reference_url https://access.redhat.com/errata/RHSA-2020:1488
reference_id RHSA-2020:1488
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1488
24
reference_url https://access.redhat.com/errata/RHSA-2020:1489
reference_id RHSA-2020:1489
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1489
25
reference_url https://access.redhat.com/errata/RHSA-2020:1495
reference_id RHSA-2020:1495
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1495
26
reference_url https://access.redhat.com/errata/RHSA-2020:1496
reference_id RHSA-2020:1496
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1496
27
reference_url https://bugzilla.mozilla.org/show_bug.cgi?id=1626728
reference_id show_bug.cgi?id=1626728
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-07T12:49:16Z/
url https://bugzilla.mozilla.org/show_bug.cgi?id=1626728
28
reference_url https://usn.ubuntu.com/4317-1/
reference_id USN-4317-1
reference_type
scores
url https://usn.ubuntu.com/4317-1/
29
reference_url https://usn.ubuntu.com/4328-1/
reference_id USN-4328-1
reference_type
scores
url https://usn.ubuntu.com/4328-1/
fixed_packages
0
url pkg:apk/alpine/firefox-esr@68.6.1-r0?arch=armv7&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/firefox-esr@68.6.1-r0?arch=armv7&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/firefox-esr@68.6.1-r0%3Farch=armv7&distroversion=v3.22&reponame=community
aliases CVE-2020-6820
risk_score 10.0
exploitability 2.0
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2v5h-3qba-k3gx
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:apk/alpine/firefox-esr@68.6.1-r0%3Farch=armv7&distroversion=v3.22&reponame=community