Lookup for vulnerable packages by Package URL.

Purlpkg:apk/alpine/librewolf@97.0.2-r0?arch=loongarch64&distroversion=v3.23&reponame=community
Typeapk
Namespacealpine
Namelibrewolf
Version97.0.2-r0
Qualifiers
arch loongarch64
distroversion v3.23
reponame community
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version98.0-r0
Latest_non_vulnerable_version119.0-r0
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-8mx3-68nj-wkhc
vulnerability_id VCID-8mx3-68nj-wkhc
summary Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-26485.json
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-26485.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-26485
reference_id
reference_type
scores
0
value 0.02853
scoring_system epss
scoring_elements 0.86526
published_at 2026-06-06T12:55:00Z
1
value 0.02853
scoring_system epss
scoring_elements 0.86503
published_at 2026-06-04T12:55:00Z
2
value 0.02853
scoring_system epss
scoring_elements 0.86523
published_at 2026-06-09T12:55:00Z
3
value 0.02853
scoring_system epss
scoring_elements 0.86511
published_at 2026-06-08T12:55:00Z
4
value 0.02853
scoring_system epss
scoring_elements 0.86522
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-26485
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26485
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26485
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26486
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26486
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2061736
reference_id 2061736
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2061736
6
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2022-09
reference_id mfsa2022-09
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2022-09
7
reference_url https://www.mozilla.org/security/advisories/mfsa2022-09/
reference_id mfsa2022-09
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-01-28T21:32:55Z/
url https://www.mozilla.org/security/advisories/mfsa2022-09/
8
reference_url https://access.redhat.com/errata/RHSA-2022:0815
reference_id RHSA-2022:0815
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0815
9
reference_url https://access.redhat.com/errata/RHSA-2022:0816
reference_id RHSA-2022:0816
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0816
10
reference_url https://access.redhat.com/errata/RHSA-2022:0817
reference_id RHSA-2022:0817
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0817
11
reference_url https://access.redhat.com/errata/RHSA-2022:0818
reference_id RHSA-2022:0818
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0818
12
reference_url https://access.redhat.com/errata/RHSA-2022:0824
reference_id RHSA-2022:0824
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0824
13
reference_url https://access.redhat.com/errata/RHSA-2022:0843
reference_id RHSA-2022:0843
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0843
14
reference_url https://access.redhat.com/errata/RHSA-2022:0845
reference_id RHSA-2022:0845
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0845
15
reference_url https://access.redhat.com/errata/RHSA-2022:0847
reference_id RHSA-2022:0847
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0847
16
reference_url https://access.redhat.com/errata/RHSA-2022:0850
reference_id RHSA-2022:0850
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0850
17
reference_url https://access.redhat.com/errata/RHSA-2022:0853
reference_id RHSA-2022:0853
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0853
18
reference_url https://bugzilla.mozilla.org/show_bug.cgi?id=1758062
reference_id show_bug.cgi?id=1758062
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-01-28T21:32:55Z/
url https://bugzilla.mozilla.org/show_bug.cgi?id=1758062
19
reference_url https://usn.ubuntu.com/5314-1/
reference_id USN-5314-1
reference_type
scores
url https://usn.ubuntu.com/5314-1/
fixed_packages
0
url pkg:apk/alpine/librewolf@97.0.2-r0?arch=loongarch64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/librewolf@97.0.2-r0?arch=loongarch64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/librewolf@97.0.2-r0%3Farch=loongarch64&distroversion=v3.23&reponame=community
aliases CVE-2022-26485
risk_score 10.0
exploitability 2.0
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8mx3-68nj-wkhc
1
url VCID-me5q-nc1u-nudh
vulnerability_id VCID-me5q-nc1u-nudh
summary An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-26486.json
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-26486.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-26486
reference_id
reference_type
scores
0
value 0.02529
scoring_system epss
scoring_elements 0.85708
published_at 2026-06-04T12:55:00Z
1
value 0.02529
scoring_system epss
scoring_elements 0.85731
published_at 2026-06-05T12:55:00Z
2
value 0.02529
scoring_system epss
scoring_elements 0.85715
published_at 2026-06-08T12:55:00Z
3
value 0.02529
scoring_system epss
scoring_elements 0.8573
published_at 2026-06-07T12:55:00Z
4
value 0.02529
scoring_system epss
scoring_elements 0.85734
published_at 2026-06-06T12:55:00Z
5
value 0.02529
scoring_system epss
scoring_elements 0.85729
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-26486
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26485
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26485
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26486
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26486
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2061735
reference_id 2061735
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2061735
6
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2022-09
reference_id mfsa2022-09
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2022-09
7
reference_url https://www.mozilla.org/security/advisories/mfsa2022-09/
reference_id mfsa2022-09
reference_type
scores
0
value 9.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-01-28T21:24:00Z/
url https://www.mozilla.org/security/advisories/mfsa2022-09/
8
reference_url https://access.redhat.com/errata/RHSA-2022:0815
reference_id RHSA-2022:0815
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0815
9
reference_url https://access.redhat.com/errata/RHSA-2022:0816
reference_id RHSA-2022:0816
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0816
10
reference_url https://access.redhat.com/errata/RHSA-2022:0817
reference_id RHSA-2022:0817
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0817
11
reference_url https://access.redhat.com/errata/RHSA-2022:0818
reference_id RHSA-2022:0818
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0818
12
reference_url https://access.redhat.com/errata/RHSA-2022:0824
reference_id RHSA-2022:0824
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0824
13
reference_url https://access.redhat.com/errata/RHSA-2022:0843
reference_id RHSA-2022:0843
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0843
14
reference_url https://access.redhat.com/errata/RHSA-2022:0845
reference_id RHSA-2022:0845
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0845
15
reference_url https://access.redhat.com/errata/RHSA-2022:0847
reference_id RHSA-2022:0847
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0847
16
reference_url https://access.redhat.com/errata/RHSA-2022:0850
reference_id RHSA-2022:0850
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0850
17
reference_url https://access.redhat.com/errata/RHSA-2022:0853
reference_id RHSA-2022:0853
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0853
18
reference_url https://bugzilla.mozilla.org/show_bug.cgi?id=1758070
reference_id show_bug.cgi?id=1758070
reference_type
scores
0
value 9.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-01-28T21:24:00Z/
url https://bugzilla.mozilla.org/show_bug.cgi?id=1758070
19
reference_url https://usn.ubuntu.com/5314-1/
reference_id USN-5314-1
reference_type
scores
url https://usn.ubuntu.com/5314-1/
fixed_packages
0
url pkg:apk/alpine/librewolf@97.0.2-r0?arch=loongarch64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/librewolf@97.0.2-r0?arch=loongarch64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/librewolf@97.0.2-r0%3Farch=loongarch64&distroversion=v3.23&reponame=community
aliases CVE-2022-26486
risk_score 10.0
exploitability 2.0
weighted_severity 8.6
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-me5q-nc1u-nudh
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:apk/alpine/librewolf@97.0.2-r0%3Farch=loongarch64&distroversion=v3.23&reponame=community