Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-6mhz-qs9v-vqcj
Vulnerability ID VCID-6mhz-qs9v-vqcj
Aliases GHSA-3mq5-fq9h-gj7j
GMS-2022-9109
Summary Duplicate Advisory: Denial of Service due to parser crash
Status Published
Exploitability 0.5
Weighted Severity 2.7
Risk 1.4
Affected and Fixed Packages Package Details
Weaknesses (2)
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
generic_textual LOW https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47367
cvssv3.1_qr LOW https://github.com/advisories/GHSA-3mq5-fq9h-gj7j
generic_textual LOW https://github.com/x-stream/xstream
generic_textual LOW https://github.com/x-stream/xstream/issues/304
generic_textual LOW https://github.com/x-stream/xstream/issues/314
generic_textual LOW https://nvd.nist.gov/vuln/detail/CVE-2022-40151
Reference id Reference type URL
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/issues/314
CVE-2022-40151 https://nvd.nist.gov/vuln/detail/CVE-2022-40151
GHSA-3mq5-fq9h-gj7j https://github.com/advisories/GHSA-3mq5-fq9h-gj7j
No exploits are available.

No EPSS data available for this vulnerability.

Date Actor Action Source VulnerableCode Version
2026-06-11T20:32:35.319818+00:00 GHSA Importer Import https://github.com/advisories/GHSA-3mq5-fq9h-gj7j 38.6.0