Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:apk/alpine/suricata@6.0.4-r0?arch=s390x&distroversion=v3.22&reponame=community
Typeapk
Namespacealpine
Namesuricata
Version6.0.4-r0
Qualifiers
arch s390x
distroversion v3.22
reponame community
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version7.0.6-r0
Latest_non_vulnerable_version7.0.8-r0
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-8e9w-87a5-23gt
vulnerability_id VCID-8e9w-87a5-23gt
summary An issue was discovered in Suricata before 6.0.4. It is possible to bypass/evade any HTTP-based signature by faking an RST TCP packet with random TCP options of the md5header from the client side. After the three-way handshake, it's possible to inject an RST ACK with a random TCP md5header option. Then, the client can send an HTTP GET request with a forbidden URL. The server will ignore the RST ACK and send the response HTTP packet for the client's request. These packets will not trigger a Suricata reject action.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-45098
reference_id
reference_type
scores
0
value 0.00404
scoring_system epss
scoring_elements 0.61372
published_at 2026-06-11T12:55:00Z
1
value 0.00404
scoring_system epss
scoring_elements 0.61477
published_at 2026-06-12T12:55:00Z
2
value 0.00404
scoring_system epss
scoring_elements 0.61484
published_at 2026-06-13T12:55:00Z
3
value 0.00404
scoring_system epss
scoring_elements 0.6148
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-45098
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45098
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45098
fixed_packages
0
url pkg:apk/alpine/suricata@6.0.4-r0?arch=s390x&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/suricata@6.0.4-r0?arch=s390x&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/suricata@6.0.4-r0%3Farch=s390x&distroversion=v3.22&reponame=community
aliases CVE-2021-45098
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8e9w-87a5-23gt
1
url VCID-qbq6-7kz5-4ke6
vulnerability_id VCID-qbq6-7kz5-4ke6
summary Suricata before 5.0.8 and 6.x before 6.0.4 allows TCP evasion via a client with a crafted TCP/IP stack that can send a certain sequence of segments.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-37592
reference_id
reference_type
scores
0
value 0.00158
scoring_system epss
scoring_elements 0.36374
published_at 2026-06-11T12:55:00Z
1
value 0.00158
scoring_system epss
scoring_elements 0.36554
published_at 2026-06-12T12:55:00Z
2
value 0.00158
scoring_system epss
scoring_elements 0.36579
published_at 2026-06-13T12:55:00Z
3
value 0.00158
scoring_system epss
scoring_elements 0.36568
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-37592
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37592
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37592
fixed_packages
0
url pkg:apk/alpine/suricata@6.0.4-r0?arch=s390x&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/suricata@6.0.4-r0?arch=s390x&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/suricata@6.0.4-r0%3Farch=s390x&distroversion=v3.22&reponame=community
aliases CVE-2021-37592
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qbq6-7kz5-4ke6
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:apk/alpine/suricata@6.0.4-r0%3Farch=s390x&distroversion=v3.22&reponame=community