Lookup for vulnerable packages by Package URL.

Purlpkg:rpm/redhat/skopeo@2:1.9.2-1?arch=el9
Typerpm
Namespaceredhat
Nameskopeo
Version2:1.9.2-1
Qualifiers
arch el9
Subpath
Is_vulnerabletrue
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
0
url VCID-5wtx-278c-nycq
vulnerability_id VCID-5wtx-278c-nycq
summary Multiple vulnerabilities have been found in Go, the worst of which could result in remote code execution.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-33198.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-33198.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-33198
reference_id
reference_type
scores
0
value 0.00031
scoring_system epss
scoring_elements 0.08775
published_at 2026-04-01T12:55:00Z
1
value 0.00031
scoring_system epss
scoring_elements 0.08702
published_at 2026-04-18T12:55:00Z
2
value 0.00031
scoring_system epss
scoring_elements 0.08839
published_at 2026-04-13T12:55:00Z
3
value 0.00031
scoring_system epss
scoring_elements 0.08727
published_at 2026-04-16T12:55:00Z
4
value 0.00031
scoring_system epss
scoring_elements 0.08801
published_at 2026-04-02T12:55:00Z
5
value 0.00031
scoring_system epss
scoring_elements 0.0885
published_at 2026-04-04T12:55:00Z
6
value 0.00031
scoring_system epss
scoring_elements 0.08782
published_at 2026-04-07T12:55:00Z
7
value 0.00031
scoring_system epss
scoring_elements 0.0886
published_at 2026-04-08T12:55:00Z
8
value 0.00031
scoring_system epss
scoring_elements 0.08886
published_at 2026-04-09T12:55:00Z
9
value 0.00031
scoring_system epss
scoring_elements 0.08885
published_at 2026-04-11T12:55:00Z
10
value 0.00031
scoring_system epss
scoring_elements 0.08853
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-33198
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33198
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33198
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1989575
reference_id 1989575
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1989575
5
reference_url https://security.archlinux.org/ASA-202106-42
reference_id ASA-202106-42
reference_type
scores
url https://security.archlinux.org/ASA-202106-42
6
reference_url https://security.archlinux.org/AVG-2006
reference_id AVG-2006
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2006
7
reference_url https://security.gentoo.org/glsa/202208-02
reference_id GLSA-202208-02
reference_type
scores
url https://security.gentoo.org/glsa/202208-02
8
reference_url https://access.redhat.com/errata/RHSA-2021:2983
reference_id RHSA-2021:2983
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2983
9
reference_url https://access.redhat.com/errata/RHSA-2021:2984
reference_id RHSA-2021:2984
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2984
10
reference_url https://access.redhat.com/errata/RHSA-2021:3009
reference_id RHSA-2021:3009
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3009
11
reference_url https://access.redhat.com/errata/RHSA-2021:3146
reference_id RHSA-2021:3146
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3146
12
reference_url https://access.redhat.com/errata/RHSA-2021:3229
reference_id RHSA-2021:3229
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3229
13
reference_url https://access.redhat.com/errata/RHSA-2021:3248
reference_id RHSA-2021:3248
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3248
14
reference_url https://access.redhat.com/errata/RHSA-2021:3361
reference_id RHSA-2021:3361
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3361
15
reference_url https://access.redhat.com/errata/RHSA-2021:3487
reference_id RHSA-2021:3487
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3487
16
reference_url https://access.redhat.com/errata/RHSA-2021:3555
reference_id RHSA-2021:3555
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3555
17
reference_url https://access.redhat.com/errata/RHSA-2021:3556
reference_id RHSA-2021:3556
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3556
18
reference_url https://access.redhat.com/errata/RHSA-2021:3598
reference_id RHSA-2021:3598
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3598
19
reference_url https://access.redhat.com/errata/RHSA-2021:3759
reference_id RHSA-2021:3759
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3759
20
reference_url https://access.redhat.com/errata/RHSA-2021:3820
reference_id RHSA-2021:3820
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3820
21
reference_url https://access.redhat.com/errata/RHSA-2021:4104
reference_id RHSA-2021:4104
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4104
22
reference_url https://access.redhat.com/errata/RHSA-2021:4156
reference_id RHSA-2021:4156
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4156
23
reference_url https://access.redhat.com/errata/RHSA-2021:5072
reference_id RHSA-2021:5072
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:5072
24
reference_url https://access.redhat.com/errata/RHSA-2021:5085
reference_id RHSA-2021:5085
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:5085
25
reference_url https://access.redhat.com/errata/RHSA-2021:5086
reference_id RHSA-2021:5086
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:5086
26
reference_url https://access.redhat.com/errata/RHSA-2022:0191
reference_id RHSA-2022:0191
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0191
27
reference_url https://access.redhat.com/errata/RHSA-2022:0577
reference_id RHSA-2022:0577
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0577
28
reference_url https://access.redhat.com/errata/RHSA-2022:1329
reference_id RHSA-2022:1329
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:1329
29
reference_url https://access.redhat.com/errata/RHSA-2022:1402
reference_id RHSA-2022:1402
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:1402
30
reference_url https://access.redhat.com/errata/RHSA-2022:7955
reference_id RHSA-2022:7955
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:7955
31
reference_url https://access.redhat.com/errata/RHSA-2024:10289
reference_id RHSA-2024:10289
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:10289
32
reference_url https://access.redhat.com/errata/RHSA-2024:2586
reference_id RHSA-2024:2586
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2586
33
reference_url https://access.redhat.com/errata/RHSA-2024:2988
reference_id RHSA-2024:2988
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2988
fixed_packages
aliases CVE-2021-33198
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5wtx-278c-nycq
1
url VCID-pqs8-s3dm-7ff2
vulnerability_id VCID-pqs8-s3dm-7ff2
summary
Improper Locking in github.com/containers/storage
A deadlock vulnerability was found in `github.com/containers/storage` in versions before 1.28.1. When a container image is processed, each layer is unpacked using `tar`. If one of those layers is not a valid `tar` archive this causes an error leading to an unexpected situation where the code indefinitely waits for the tar unpacked stream, which never finishes. An attacker could use this vulnerability to craft a malicious image, which when downloaded and stored by an application using containers/storage, would then cause a deadlock leading to a Denial of Service (DoS).
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-20291.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-20291.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-20291
reference_id
reference_type
scores
0
value 0.01026
scoring_system epss
scoring_elements 0.77315
published_at 2026-04-21T12:55:00Z
1
value 0.01026
scoring_system epss
scoring_elements 0.77306
published_at 2026-04-11T12:55:00Z
2
value 0.01026
scoring_system epss
scoring_elements 0.77323
published_at 2026-04-18T12:55:00Z
3
value 0.01026
scoring_system epss
scoring_elements 0.77324
published_at 2026-04-16T12:55:00Z
4
value 0.01026
scoring_system epss
scoring_elements 0.77283
published_at 2026-04-13T12:55:00Z
5
value 0.01026
scoring_system epss
scoring_elements 0.77286
published_at 2026-04-12T12:55:00Z
6
value 0.01026
scoring_system epss
scoring_elements 0.77221
published_at 2026-04-01T12:55:00Z
7
value 0.01026
scoring_system epss
scoring_elements 0.77228
published_at 2026-04-02T12:55:00Z
8
value 0.01026
scoring_system epss
scoring_elements 0.77257
published_at 2026-04-04T12:55:00Z
9
value 0.01026
scoring_system epss
scoring_elements 0.77239
published_at 2026-04-07T12:55:00Z
10
value 0.01026
scoring_system epss
scoring_elements 0.7727
published_at 2026-04-08T12:55:00Z
11
value 0.01026
scoring_system epss
scoring_elements 0.77279
published_at 2026-04-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-20291
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1939485
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=1939485
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20291
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20291
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://github.com/containers/storage
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/containers/storage
6
reference_url https://github.com/containers/storage/commit/306fcabc964470e4b3b87a43a8f6b7d698209ee1
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/containers/storage/commit/306fcabc964470e4b3b87a43a8f6b7d698209ee1
7
reference_url https://github.com/containers/storage/pull/860
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/containers/storage/pull/860
8
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R5D7XL7FL24TWFMGQ3K2S72EOUSLZMKL
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R5D7XL7FL24TWFMGQ3K2S72EOUSLZMKL
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SPYOHNG2Q7DCAQZMGYLMENLKALGDLG3X
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SPYOHNG2Q7DCAQZMGYLMENLKALGDLG3X
10
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WX24EITRXVHDM5M223BVTJA2ODF2FSHI
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WX24EITRXVHDM5M223BVTJA2ODF2FSHI
11
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZNMB7O2UIXE34PGSCSOULGHPX5LIJBMM
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZNMB7O2UIXE34PGSCSOULGHPX5LIJBMM
12
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-20291
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-20291
13
reference_url https://pkg.go.dev/vuln/GO-2021-0100
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://pkg.go.dev/vuln/GO-2021-0100
14
reference_url https://unit42.paloaltonetworks.com/cve-2021-20291
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://unit42.paloaltonetworks.com/cve-2021-20291
15
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=988942
reference_id 988942
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=988942
16
reference_url https://access.redhat.com/errata/RHSA-2021:1150
reference_id RHSA-2021:1150
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1150
17
reference_url https://access.redhat.com/errata/RHSA-2021:2438
reference_id RHSA-2021:2438
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2438
18
reference_url https://access.redhat.com/errata/RHSA-2021:4154
reference_id RHSA-2021:4154
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4154
19
reference_url https://access.redhat.com/errata/RHSA-2022:7954
reference_id RHSA-2022:7954
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:7954
20
reference_url https://access.redhat.com/errata/RHSA-2022:7955
reference_id RHSA-2022:7955
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:7955
fixed_packages
aliases CVE-2021-20291, GHSA-7qw8-847f-pggm
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pqs8-s3dm-7ff2
Fixing_vulnerabilities
Risk_score3.4
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:rpm/redhat/skopeo@2:1.9.2-1%3Farch=el9