Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/gnome-online-accounts@3.54.5-1~deb13u1?distro=trixie
Typedeb
Namespacedebian
Namegnome-online-accounts
Version3.54.5-1~deb13u1
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version3.58.1-1
Latest_non_vulnerable_version3.58.1-1
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-6quq-t6hg-p3fb
vulnerability_id VCID-6quq-t6hg-p3fb
summary Gnome Online Accounts (GOA) 3.4.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.5, does not properly validate SSL certificates when creating accounts such as Windows Live and Facebook accounts, which allows man-in-the-middle attackers to obtain sensitive information such as credentials by sniffing the network.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-0240
reference_id
reference_type
scores
0
value 0.00476
scoring_system epss
scoring_elements 0.65233
published_at 2026-06-04T12:55:00Z
1
value 0.00476
scoring_system epss
scoring_elements 0.65275
published_at 2026-06-05T12:55:00Z
2
value 0.00476
scoring_system epss
scoring_elements 0.65285
published_at 2026-06-06T12:55:00Z
3
value 0.00476
scoring_system epss
scoring_elements 0.65273
published_at 2026-06-07T12:55:00Z
4
value 0.00476
scoring_system epss
scoring_elements 0.65263
published_at 2026-06-08T12:55:00Z
5
value 0.00476
scoring_system epss
scoring_elements 0.65282
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-0240
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0240
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0240
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699825
reference_id 699825
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699825
3
reference_url https://usn.ubuntu.com/1779-1/
reference_id USN-1779-1
reference_type
scores
url https://usn.ubuntu.com/1779-1/
fixed_packages
0
url pkg:deb/debian/gnome-online-accounts@3.4.2-2?distro=trixie
purl pkg:deb/debian/gnome-online-accounts@3.4.2-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gnome-online-accounts@3.4.2-2%3Fdistro=trixie
1
url pkg:deb/debian/gnome-online-accounts@3.38.0-3?distro=trixie
purl pkg:deb/debian/gnome-online-accounts@3.38.0-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gnome-online-accounts@3.38.0-3%3Fdistro=trixie
2
url pkg:deb/debian/gnome-online-accounts@3.46.0-1?distro=trixie
purl pkg:deb/debian/gnome-online-accounts@3.46.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gnome-online-accounts@3.46.0-1%3Fdistro=trixie
3
url pkg:deb/debian/gnome-online-accounts@3.54.5-1~deb13u1?distro=trixie
purl pkg:deb/debian/gnome-online-accounts@3.54.5-1~deb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gnome-online-accounts@3.54.5-1~deb13u1%3Fdistro=trixie
4
url pkg:deb/debian/gnome-online-accounts@3.58.1-1?distro=trixie
purl pkg:deb/debian/gnome-online-accounts@3.58.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gnome-online-accounts@3.58.1-1%3Fdistro=trixie
aliases CVE-2013-0240
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6quq-t6hg-p3fb
1
url VCID-pbxp-3grz-8kfb
vulnerability_id VCID-pbxp-3grz-8kfb
summary Gnome Online Accounts (GOA) 3.6.x before 3.6.3 and 3.7.x before 3.7.91, does not properly validate SSL certificates when creating accounts for providers who use the libsoup library, which allows man-in-the-middle attackers to obtain sensitive information such as credentials by sniffing the network. NOTE: this issue exists because of an incomplete fix for CVE-2013-0240.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-1799
reference_id
reference_type
scores
0
value 0.00556
scoring_system epss
scoring_elements 0.68499
published_at 2026-06-04T12:55:00Z
1
value 0.00556
scoring_system epss
scoring_elements 0.6854
published_at 2026-06-05T12:55:00Z
2
value 0.00556
scoring_system epss
scoring_elements 0.68547
published_at 2026-06-06T12:55:00Z
3
value 0.00556
scoring_system epss
scoring_elements 0.68541
published_at 2026-06-07T12:55:00Z
4
value 0.00556
scoring_system epss
scoring_elements 0.68525
published_at 2026-06-08T12:55:00Z
5
value 0.00556
scoring_system epss
scoring_elements 0.68543
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-1799
1
reference_url https://usn.ubuntu.com/1779-1/
reference_id USN-1779-1
reference_type
scores
url https://usn.ubuntu.com/1779-1/
fixed_packages
0
url pkg:deb/debian/gnome-online-accounts@0?distro=trixie
purl pkg:deb/debian/gnome-online-accounts@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gnome-online-accounts@0%3Fdistro=trixie
1
url pkg:deb/debian/gnome-online-accounts@3.38.0-3?distro=trixie
purl pkg:deb/debian/gnome-online-accounts@3.38.0-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gnome-online-accounts@3.38.0-3%3Fdistro=trixie
2
url pkg:deb/debian/gnome-online-accounts@3.46.0-1?distro=trixie
purl pkg:deb/debian/gnome-online-accounts@3.46.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gnome-online-accounts@3.46.0-1%3Fdistro=trixie
3
url pkg:deb/debian/gnome-online-accounts@3.54.5-1~deb13u1?distro=trixie
purl pkg:deb/debian/gnome-online-accounts@3.54.5-1~deb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gnome-online-accounts@3.54.5-1~deb13u1%3Fdistro=trixie
4
url pkg:deb/debian/gnome-online-accounts@3.58.1-1?distro=trixie
purl pkg:deb/debian/gnome-online-accounts@3.58.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gnome-online-accounts@3.58.1-1%3Fdistro=trixie
aliases CVE-2013-1799
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pbxp-3grz-8kfb
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/gnome-online-accounts@3.54.5-1~deb13u1%3Fdistro=trixie