[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2022-28282":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T14:55:33.319Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":43,"duplicate_of":9,"upstream":44,"downstream":45,"duplicates":102,"related":103,"reserved_at":9,"published_at":114,"modified_at":115,"state":116,"summary":117,"references_raw":125,"kevs":142,"epss":143,"epss_history":146,"metrics":402,"affected":410},"CVE-2022-28282","By using a link with \u003Ccode>rel=\"localization\"\u003C/code> a use-after-free could have been triggered by destroying an object during JavaScript execution and then referencing the object through a freed pointer, leading to a potential exploitable crash. This vulnerability affects Thunderbird \u003C 91.8, Firefox \u003C 99, and Firefox ESR \u003C 91.8.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-416","Use After Free","The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","weakness","Stable","Variant","High",[],[21,30,34,38],{"_key":22,"name":23,"source":24,"url":25,"maturity":26,"reliability_score":27,"verified":28,"type":9,"platforms":29,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_8756C78F78626C4C","Exploit Reference (mozilla.org)","reference","https://www.mozilla.org/security/advisories/mfsa2022-13/","unknown",0.2,false,[],{"_key":31,"name":23,"source":24,"url":32,"maturity":26,"reliability_score":27,"verified":28,"type":9,"platforms":33,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_D427C1ECB51E5EB5","https://www.mozilla.org/security/advisories/mfsa2022-14/",[],{"_key":35,"name":23,"source":24,"url":36,"maturity":26,"reliability_score":27,"verified":28,"type":9,"platforms":37,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_D4340350FE58C0D0","https://www.mozilla.org/security/advisories/mfsa2022-15/",[],{"_key":39,"name":40,"source":24,"url":41,"maturity":26,"reliability_score":27,"verified":28,"type":9,"platforms":42,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_49D89F9432EA1334","Exploit Reference (bugzilla.mozilla.org)","https://bugzilla.mozilla.org/show_bug.cgi?id=1751609",[],[],[],[46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98,100],{"_key":47},"SUSE-RU-2022:1125-1",{"_key":49},"SUSE-RU-2022:14935-1",{"_key":51},"RHSA-2022:1283",{"_key":53},"RHSA-2022:1284",{"_key":55},"RHSA-2022:1285",{"_key":57},"RHSA-2022:1286",{"_key":59},"RHSA-2022:1287",{"_key":61},"RHSA-2022:1301",{"_key":63},"RHSA-2022:1302",{"_key":65},"RHSA-2022:1303",{"_key":67},"RHSA-2022:1305",{"_key":69},"RHSA-2022:1326",{"_key":71},"SUSE-SU-2022:1176-1",{"_key":73},"SUSE-RU-2022:1114-1",{"_key":75},"SUSE-SU-2022:1127-1",{"_key":77},"OPENSUSE-SU-2022:1127-1",{"_key":79},"OPENSUSE-SU-2024:11975-1",{"_key":81},"OPENSUSE-SU-2024:14572-1",{"_key":83},"DLA-2971-1",{"_key":85},"DLA-2978-1",{"_key":87},"DSA-5113-1",{"_key":89},"DSA-5118-1",{"_key":91},"MGASA-2022-0156",{"_key":93},"MGASA-2022-0157",{"_key":95},"USN-5370-1",{"_key":97},"USN-5393-1",{"_key":99},"UBUNTU-CVE-2022-28282",{"_key":101},"DEBIAN-CVE-2022-28282",[],[104,105,106,107,108,109,110,111,112,113],{"_key":47},{"_key":49},{"_key":71},{"_key":73},{"_key":75},{"_key":77},{"_key":79},{"_key":81},{"_key":91},{"_key":93},"2022-12-22T00:00:00.000Z","2025-04-15T20:09:15.856Z","Modified",{"cisa_kev":28,"cisa_ransomware":28,"cisa_vendor":9,"epss_severity":118,"epss_score":119,"severity":120,"severity_score":121,"severity_version":122,"severity_source":123,"severity_vector":124,"severity_status":116},"low",0.08076,"medium",6.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",[126,132,135,138],{"url":25,"sources":127,"tags":129},[123,128],"nvd",[130,131],"Exploit","Vendor Advisory",{"url":32,"sources":133,"tags":134},[123,128],[130,131],{"url":36,"sources":136,"tags":137},[123,128],[130,131],{"url":41,"sources":139,"tags":140},[123,128],[130,141,131],"Issue Tracking",[],{"date":144,"score":119,"percentile":145},"2026-06-04",0.9229,[147,151,154,157,160,163,165,168,171,174,177,180,182,185,187,191,194,197,200,202,205,208,211,213,215,218,221,224,227,230,233,235,237,239,242,245,248,251,254,257,260,263,266,269,272,275,278,280,283,285,289,293,296,298,301,304,307,309,312,315,318,320,323,326,329,331,334,338,341,344,347,349,352,355,358,361,363,365,368,371,374,377,380,383,386,389,392,394,396,399],{"date":148,"score":149,"percentile":150},"2025-11-04",0.05072,0.89291,{"date":152,"score":149,"percentile":153},"2025-11-05",0.89289,{"date":155,"score":149,"percentile":156},"2025-11-06",0.8929,{"date":158,"score":149,"percentile":159},"2025-11-07",0.89298,{"date":161,"score":149,"percentile":162},"2025-11-08",0.893,{"date":164,"score":149,"percentile":159},"2025-11-09",{"date":166,"score":149,"percentile":167},"2025-11-10",0.89294,{"date":169,"score":149,"percentile":170},"2025-11-11",0.89297,{"date":172,"score":149,"percentile":173},"2025-11-12",0.89304,{"date":175,"score":149,"percentile":176},"2025-11-13",0.89309,{"date":178,"score":149,"percentile":179},"2025-11-14",0.89312,{"date":181,"score":149,"percentile":176},"2025-11-15",{"date":183,"score":149,"percentile":184},"2025-11-16",0.89311,{"date":186,"score":149,"percentile":176},"2025-11-17",{"date":188,"score":189,"percentile":190},"2025-11-18",0.15884,0.94196,{"date":192,"score":189,"percentile":193},"2025-11-19",0.94201,{"date":195,"score":189,"percentile":196},"2025-11-20",0.94204,{"date":198,"score":149,"percentile":199},"2025-11-21",0.89324,{"date":201,"score":149,"percentile":199},"2025-11-22",{"date":203,"score":149,"percentile":204},"2025-11-23",0.89321,{"date":206,"score":149,"percentile":207},"2025-11-24",0.89323,{"date":209,"score":149,"percentile":210},"2025-11-25",0.89325,{"date":212,"score":149,"percentile":207},"2025-11-26",{"date":214,"score":149,"percentile":199},"2025-11-27",{"date":216,"score":149,"percentile":217},"2025-11-28",0.89317,{"date":219,"score":149,"percentile":220},"2025-11-29",0.89386,{"date":222,"score":149,"percentile":223},"2025-11-30",0.89384,{"date":225,"score":149,"percentile":226},"2025-12-01",0.89446,{"date":228,"score":149,"percentile":229},"2025-12-02",0.89449,{"date":231,"score":149,"percentile":232},"2025-12-03",0.89445,{"date":234,"score":149,"percentile":223},"2025-12-04",{"date":236,"score":149,"percentile":220},"2025-12-05",{"date":238,"score":149,"percentile":220},"2025-12-06",{"date":240,"score":149,"percentile":241},"2025-12-07",0.89382,{"date":243,"score":149,"percentile":244},"2025-12-08",0.89383,{"date":246,"score":149,"percentile":247},"2025-12-09",0.89389,{"date":249,"score":149,"percentile":250},"2025-12-10",0.89404,{"date":252,"score":149,"percentile":253},"2025-12-11",0.89407,{"date":255,"score":149,"percentile":256},"2025-12-12",0.89413,{"date":258,"score":149,"percentile":259},"2025-12-13",0.89416,{"date":261,"score":149,"percentile":262},"2025-12-14",0.89418,{"date":264,"score":149,"percentile":265},"2025-12-15",0.89419,{"date":267,"score":149,"percentile":268},"2025-12-16",0.89411,{"date":270,"score":149,"percentile":271},"2025-12-17",0.89417,{"date":273,"score":149,"percentile":274},"2025-12-18",0.89424,{"date":276,"score":149,"percentile":277},"2025-12-19",0.89425,{"date":279,"score":149,"percentile":274},"2025-12-20",{"date":281,"score":149,"percentile":282},"2025-12-21",0.89432,{"date":284,"score":149,"percentile":282},"2025-12-22",{"date":286,"score":287,"percentile":288},"2025-12-23",0.06083,0.90429,{"date":290,"score":291,"percentile":292},"2025-12-24",0.07764,0.91647,{"date":294,"score":291,"percentile":295},"2025-12-25",0.91648,{"date":297,"score":291,"percentile":295},"2025-12-26",{"date":299,"score":291,"percentile":300},"2025-12-27",0.91679,{"date":302,"score":291,"percentile":303},"2025-12-28",0.91645,{"date":305,"score":291,"percentile":306},"2025-12-29",0.91642,{"date":308,"score":291,"percentile":292},"2025-12-30",{"date":310,"score":291,"percentile":311},"2025-12-31",0.91655,{"date":313,"score":291,"percentile":314},"2026-01-01",0.91716,{"date":316,"score":291,"percentile":317},"2026-01-02",0.91711,{"date":319,"score":291,"percentile":317},"2026-01-03",{"date":321,"score":291,"percentile":322},"2026-01-04",0.91665,{"date":324,"score":291,"percentile":325},"2026-01-05",0.91661,{"date":327,"score":291,"percentile":328},"2026-01-06",0.91664,{"date":330,"score":291,"percentile":322},"2026-01-07",{"date":332,"score":291,"percentile":333},"2026-01-08",0.91666,{"date":335,"score":336,"percentile":337},"2026-01-09",0.09214,0.92455,{"date":339,"score":336,"percentile":340},"2026-01-10",0.92456,{"date":342,"score":336,"percentile":343},"2026-01-11",0.92451,{"date":345,"score":336,"percentile":346},"2026-01-12",0.92452,{"date":348,"score":336,"percentile":346},"2026-01-13",{"date":350,"score":336,"percentile":351},"2026-01-14",0.92463,{"date":353,"score":336,"percentile":354},"2026-01-15",0.92462,{"date":356,"score":336,"percentile":357},"2026-01-16",0.92466,{"date":359,"score":336,"percentile":360},"2026-01-17",0.92467,{"date":362,"score":336,"percentile":354},"2026-01-18",{"date":364,"score":336,"percentile":351},"2026-01-19",{"date":366,"score":336,"percentile":367},"2026-01-20",0.92464,{"date":369,"score":336,"percentile":370},"2026-01-21",0.92469,{"date":372,"score":336,"percentile":373},"2026-01-22",0.92472,{"date":375,"score":336,"percentile":376},"2026-01-23",0.92478,{"date":378,"score":336,"percentile":379},"2026-01-24",0.92485,{"date":381,"score":336,"percentile":382},"2026-01-25",0.92488,{"date":384,"score":336,"percentile":385},"2026-01-26",0.92489,{"date":387,"score":336,"percentile":388},"2026-01-27",0.92491,{"date":390,"score":336,"percentile":391},"2026-01-28",0.92494,{"date":393,"score":336,"percentile":391},"2026-01-29",{"date":395,"score":336,"percentile":391},"2026-01-30",{"date":397,"score":336,"percentile":398},"2026-01-31",0.92495,{"date":400,"score":336,"percentile":401},"2026-02-01",0.92537,[403,408],{"source":123,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":404,"cvss_v4_0":9},{"baseScore":121,"baseSeverity":405,"vectorString":124,"impactScore":406,"exploitabilityScore":407},"MEDIUM",6,7.2,{"source":128,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":409,"cvss_v4_0":9},{"baseScore":121,"baseSeverity":405,"vectorString":124,"impactScore":406,"exploitabilityScore":407},[411,427,436],{"ecosystem":9,"name":412,"vendor":413,"product":412,"cpe_part":414,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":415},"firefox","mozilla","a",[416,423],{"version":417,"is_range":418,"range_type":123,"version_start":419,"version_start_type":420,"version_end":421,"version_end_type":422,"fixed_in":9},">= unspecified, \u003C 99",true,"unspecified","including","99","excluding",{"version":424,"is_range":418,"range_type":425,"version_start":9,"version_start_type":9,"version_end":426,"version_end_type":422,"fixed_in":9},"lt99.0","cpe","99.0",{"ecosystem":9,"name":428,"vendor":413,"product":429,"cpe_part":414,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":430},"firefox esr","firefox_esr",[431,434],{"version":432,"is_range":418,"range_type":123,"version_start":419,"version_start_type":420,"version_end":433,"version_end_type":422,"fixed_in":9},">= unspecified, \u003C 91.8","91.8",{"version":435,"is_range":418,"range_type":425,"version_start":9,"version_start_type":9,"version_end":433,"version_end_type":422,"fixed_in":9},"lt91.8",{"ecosystem":9,"name":437,"vendor":413,"product":438,"cpe_part":414,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":439},"Thunderbird","thunderbird",[440,441],{"version":432,"is_range":418,"range_type":123,"version_start":419,"version_start_type":420,"version_end":433,"version_end_type":422,"fixed_in":9},{"version":435,"is_range":418,"range_type":425,"version_start":9,"version_start_type":9,"version_end":433,"version_end_type":422,"fixed_in":9}]