Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/otrs2@6.0.32-5?distro=bullseye
Typedeb
Namespacedebian
Nameotrs2
Version6.0.32-5
Qualifiers
distro bullseye
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version6.0.32-6
Latest_non_vulnerable_version6.0.32-6
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-9431-8f5f-rfct
vulnerability_id VCID-9431-8f5f-rfct
summary DoS attack can be performed when an email contains specially designed URL in the body. It can lead to the high CPU usage and cause low quality of service, or in extreme case bring the system to a halt. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.26 and prior versions; 8.0.x version 8.0.13 and prior versions.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-21439
reference_id
reference_type
scores
0
value 0.00348
scoring_system epss
scoring_elements 0.57232
published_at 2026-04-01T12:55:00Z
1
value 0.00348
scoring_system epss
scoring_elements 0.57314
published_at 2026-04-07T12:55:00Z
2
value 0.00348
scoring_system epss
scoring_elements 0.57337
published_at 2026-04-04T12:55:00Z
3
value 0.00348
scoring_system epss
scoring_elements 0.57365
published_at 2026-04-08T12:55:00Z
4
value 0.00348
scoring_system epss
scoring_elements 0.57367
published_at 2026-04-16T12:55:00Z
5
value 0.00348
scoring_system epss
scoring_elements 0.57382
published_at 2026-04-11T12:55:00Z
6
value 0.00348
scoring_system epss
scoring_elements 0.57362
published_at 2026-04-18T12:55:00Z
7
value 0.00348
scoring_system epss
scoring_elements 0.57341
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-21439
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21439
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21439
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989992
reference_id 989992
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989992
fixed_packages
0
url pkg:deb/debian/otrs2@6.0.32-5?distro=bullseye
purl pkg:deb/debian/otrs2@6.0.32-5?distro=bullseye
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/otrs2@6.0.32-5%3Fdistro=bullseye
1
url pkg:deb/debian/otrs2@6.0.32-6?distro=bullseye
purl pkg:deb/debian/otrs2@6.0.32-6?distro=bullseye
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/otrs2@6.0.32-6%3Fdistro=bullseye
aliases CVE-2021-21439
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9431-8f5f-rfct
1
url VCID-u8xm-v9ek-yuar
vulnerability_id VCID-u8xm-v9ek-yuar
summary There is a XSS vulnerability in the ticket overview screens. It's possible to collect various information by having an e-mail shown in the overview screen. Attack can be performed by sending specially crafted e-mail to the system and it doesn't require any user intraction. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.26 and prior versions.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-21441
reference_id
reference_type
scores
0
value 0.00296
scoring_system epss
scoring_elements 0.52823
published_at 2026-04-01T12:55:00Z
1
value 0.00296
scoring_system epss
scoring_elements 0.5285
published_at 2026-04-02T12:55:00Z
2
value 0.00296
scoring_system epss
scoring_elements 0.52876
published_at 2026-04-04T12:55:00Z
3
value 0.00296
scoring_system epss
scoring_elements 0.52844
published_at 2026-04-07T12:55:00Z
4
value 0.00296
scoring_system epss
scoring_elements 0.52895
published_at 2026-04-08T12:55:00Z
5
value 0.00296
scoring_system epss
scoring_elements 0.52889
published_at 2026-04-09T12:55:00Z
6
value 0.00296
scoring_system epss
scoring_elements 0.52939
published_at 2026-04-11T12:55:00Z
7
value 0.00296
scoring_system epss
scoring_elements 0.52923
published_at 2026-04-12T12:55:00Z
8
value 0.00296
scoring_system epss
scoring_elements 0.52907
published_at 2026-04-13T12:55:00Z
9
value 0.00296
scoring_system epss
scoring_elements 0.52944
published_at 2026-04-16T12:55:00Z
10
value 0.00296
scoring_system epss
scoring_elements 0.52951
published_at 2026-04-18T12:55:00Z
11
value 0.00296
scoring_system epss
scoring_elements 0.52934
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-21441
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21441
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21441
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989992
reference_id 989992
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989992
fixed_packages
0
url pkg:deb/debian/otrs2@6.0.32-5?distro=bullseye
purl pkg:deb/debian/otrs2@6.0.32-5?distro=bullseye
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/otrs2@6.0.32-5%3Fdistro=bullseye
1
url pkg:deb/debian/otrs2@6.0.32-6?distro=bullseye
purl pkg:deb/debian/otrs2@6.0.32-6?distro=bullseye
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/otrs2@6.0.32-6%3Fdistro=bullseye
aliases CVE-2021-21441
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-u8xm-v9ek-yuar
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/otrs2@6.0.32-5%3Fdistro=bullseye