Lookup for vulnerable packages by Package URL.

Purlpkg:apk/alpine/subversion@1.14.5-r0?arch=armhf&distroversion=v3.20&reponame=main
Typeapk
Namespacealpine
Namesubversion
Version1.14.5-r0
Qualifiers
arch armhf
distroversion v3.20
reponame main
Subpath
Is_vulnerablefalse
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-dqm8-3v44-u7ek
vulnerability_id VCID-dqm8-3v44-u7ek
summary On Windows platforms, a "best fit" character encoding conversion of command line arguments to Subversion's executables (e.g., svn.exe, etc.) may lead to unexpected command line argument interpretation, including argument injection and execution of other programs, if a specially crafted command line argument string is processed. All versions of Subversion up to and including Subversion 1.14.3 are affected on Windows platforms only. Users are recommended to upgrade to version Subversion 1.14.4, which fixes this issue. Subversion is not affected on UNIX-like platforms.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-45720
reference_id
reference_type
scores
0
value 0.00073
scoring_system epss
scoring_elements 0.22163
published_at 2026-06-09T12:55:00Z
1
value 0.00073
scoring_system epss
scoring_elements 0.22251
published_at 2026-06-06T12:55:00Z
2
value 0.00073
scoring_system epss
scoring_elements 0.22204
published_at 2026-06-07T12:55:00Z
3
value 0.00073
scoring_system epss
scoring_elements 0.2215
published_at 2026-06-08T12:55:00Z
4
value 0.00073
scoring_system epss
scoring_elements 0.22264
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-45720
1
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2
reference_url https://subversion.apache.org/security/CVE-2024-45720-advisory.txt
reference_id CVE-2024-45720-advisory.txt
reference_type
scores
0
value 8.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-10-09T13:20:38Z/
url https://subversion.apache.org/security/CVE-2024-45720-advisory.txt
fixed_packages
0
url pkg:apk/alpine/subversion@1.14.5-r0?arch=armhf&distroversion=v3.20&reponame=main
purl pkg:apk/alpine/subversion@1.14.5-r0?arch=armhf&distroversion=v3.20&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/subversion@1.14.5-r0%3Farch=armhf&distroversion=v3.20&reponame=main
aliases CVE-2024-45720
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dqm8-3v44-u7ek
1
url VCID-q3rh-6s43-sqa9
vulnerability_id VCID-q3rh-6s43-sqa9
summary Subversion: Apache Subversion: mod_dav_svn denial-of-service via control characters in paths
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-46901.json
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-46901.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-46901
reference_id
reference_type
scores
0
value 0.05806
scoring_system epss
scoring_elements 0.90703
published_at 2026-06-09T12:55:00Z
1
value 0.05806
scoring_system epss
scoring_elements 0.90691
published_at 2026-06-06T12:55:00Z
2
value 0.05806
scoring_system epss
scoring_elements 0.90689
published_at 2026-06-07T12:55:00Z
3
value 0.05806
scoring_system epss
scoring_elements 0.90687
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-46901
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46901
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46901
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2331127
reference_id 2331127
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2331127
5
reference_url https://subversion.apache.org/security/CVE-2024-46901-advisory.txt
reference_id CVE-2024-46901-advisory.txt
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-09T15:23:08Z/
url https://subversion.apache.org/security/CVE-2024-46901-advisory.txt
6
reference_url https://usn.ubuntu.com/7818-1/
reference_id USN-7818-1
reference_type
scores
url https://usn.ubuntu.com/7818-1/
7
reference_url https://usn.ubuntu.com/7818-2/
reference_id USN-7818-2
reference_type
scores
url https://usn.ubuntu.com/7818-2/
fixed_packages
0
url pkg:apk/alpine/subversion@1.14.5-r0?arch=armhf&distroversion=v3.20&reponame=main
purl pkg:apk/alpine/subversion@1.14.5-r0?arch=armhf&distroversion=v3.20&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/subversion@1.14.5-r0%3Farch=armhf&distroversion=v3.20&reponame=main
aliases CVE-2024-46901
risk_score 1.4
exploitability 0.5
weighted_severity 2.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-q3rh-6s43-sqa9
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:apk/alpine/subversion@1.14.5-r0%3Farch=armhf&distroversion=v3.20&reponame=main