Lookup for vulnerable packages by Package URL.

Purlpkg:rpm/redhat/kiali@1.24.7.redhat1-1?arch=el8
Typerpm
Namespaceredhat
Namekiali
Version1.24.7.redhat1-1
Qualifiers
arch el8
Subpath
Is_vulnerabletrue
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
0
url VCID-63v8-dt23-9ue7
vulnerability_id VCID-63v8-dt23-9ue7
summary Multiple vulnerabilities have been found in Go, the worst of which could result in remote code execution.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-29923.json
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-29923.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-29923
reference_id
reference_type
scores
0
value 0.00254
scoring_system epss
scoring_elements 0.48625
published_at 2026-04-01T12:55:00Z
1
value 0.00254
scoring_system epss
scoring_elements 0.48681
published_at 2026-04-24T12:55:00Z
2
value 0.00254
scoring_system epss
scoring_elements 0.48739
published_at 2026-04-18T12:55:00Z
3
value 0.00254
scoring_system epss
scoring_elements 0.48696
published_at 2026-04-21T12:55:00Z
4
value 0.00254
scoring_system epss
scoring_elements 0.48666
published_at 2026-04-02T12:55:00Z
5
value 0.00254
scoring_system epss
scoring_elements 0.48687
published_at 2026-04-04T12:55:00Z
6
value 0.00254
scoring_system epss
scoring_elements 0.4864
published_at 2026-04-07T12:55:00Z
7
value 0.00254
scoring_system epss
scoring_elements 0.48694
published_at 2026-04-13T12:55:00Z
8
value 0.00254
scoring_system epss
scoring_elements 0.4869
published_at 2026-04-09T12:55:00Z
9
value 0.00254
scoring_system epss
scoring_elements 0.48708
published_at 2026-04-11T12:55:00Z
10
value 0.00254
scoring_system epss
scoring_elements 0.48682
published_at 2026-04-12T12:55:00Z
11
value 0.00254
scoring_system epss
scoring_elements 0.48743
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-29923
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29923
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29923
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1992006
reference_id 1992006
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1992006
5
reference_url https://security.archlinux.org/AVG-1357
reference_id AVG-1357
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1357
6
reference_url https://security.gentoo.org/glsa/202208-02
reference_id GLSA-202208-02
reference_type
scores
url https://security.gentoo.org/glsa/202208-02
7
reference_url https://access.redhat.com/errata/RHSA-2021:3431
reference_id RHSA-2021:3431
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3431
8
reference_url https://access.redhat.com/errata/RHSA-2021:3585
reference_id RHSA-2021:3585
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3585
9
reference_url https://access.redhat.com/errata/RHSA-2021:4722
reference_id RHSA-2021:4722
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4722
10
reference_url https://access.redhat.com/errata/RHSA-2021:4725
reference_id RHSA-2021:4725
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4725
11
reference_url https://access.redhat.com/errata/RHSA-2021:4902
reference_id RHSA-2021:4902
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4902
12
reference_url https://access.redhat.com/errata/RHSA-2021:4910
reference_id RHSA-2021:4910
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4910
13
reference_url https://access.redhat.com/errata/RHSA-2022:0237
reference_id RHSA-2022:0237
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0237
14
reference_url https://access.redhat.com/errata/RHSA-2022:0260
reference_id RHSA-2022:0260
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0260
15
reference_url https://access.redhat.com/errata/RHSA-2022:0431
reference_id RHSA-2022:0431
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0431
16
reference_url https://access.redhat.com/errata/RHSA-2022:0432
reference_id RHSA-2022:0432
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0432
17
reference_url https://access.redhat.com/errata/RHSA-2022:0434
reference_id RHSA-2022:0434
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0434
18
reference_url https://access.redhat.com/errata/RHSA-2022:0557
reference_id RHSA-2022:0557
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0557
19
reference_url https://access.redhat.com/errata/RHSA-2022:0561
reference_id RHSA-2022:0561
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0561
20
reference_url https://access.redhat.com/errata/RHSA-2022:0577
reference_id RHSA-2022:0577
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0577
21
reference_url https://access.redhat.com/errata/RHSA-2022:0988
reference_id RHSA-2022:0988
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0988
22
reference_url https://access.redhat.com/errata/RHSA-2022:0989
reference_id RHSA-2022:0989
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0989
23
reference_url https://access.redhat.com/errata/RHSA-2022:0997
reference_id RHSA-2022:0997
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0997
24
reference_url https://access.redhat.com/errata/RHSA-2022:0998
reference_id RHSA-2022:0998
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0998
25
reference_url https://access.redhat.com/errata/RHSA-2022:1276
reference_id RHSA-2022:1276
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:1276
26
reference_url https://access.redhat.com/errata/RHSA-2022:1372
reference_id RHSA-2022:1372
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:1372
fixed_packages
aliases CVE-2021-29923
risk_score 3.3
exploitability 0.5
weighted_severity 6.6
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-63v8-dt23-9ue7
1
url VCID-n34c-71wq-s3e4
vulnerability_id VCID-n34c-71wq-s3e4
summary
x/crypto/ssh vulnerable to panic via malformed packets
The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an unauthenticated attacker to panic an SSH server. When using AES-GCM or ChaCha20Poly1305, consuming a malformed packet which contains an empty plaintext causes a panic.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-43565.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-43565.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-43565
reference_id
reference_type
scores
0
value 0.00015
scoring_system epss
scoring_elements 0.03266
published_at 2026-04-24T12:55:00Z
1
value 0.00015
scoring_system epss
scoring_elements 0.03161
published_at 2026-04-01T12:55:00Z
2
value 0.00015
scoring_system epss
scoring_elements 0.03218
published_at 2026-04-11T12:55:00Z
3
value 0.00015
scoring_system epss
scoring_elements 0.03227
published_at 2026-04-04T12:55:00Z
4
value 0.00015
scoring_system epss
scoring_elements 0.03233
published_at 2026-04-07T12:55:00Z
5
value 0.00015
scoring_system epss
scoring_elements 0.0324
published_at 2026-04-08T12:55:00Z
6
value 0.00015
scoring_system epss
scoring_elements 0.03261
published_at 2026-04-09T12:55:00Z
7
value 0.00015
scoring_system epss
scoring_elements 0.03191
published_at 2026-04-12T12:55:00Z
8
value 0.00015
scoring_system epss
scoring_elements 0.0317
published_at 2026-04-13T12:55:00Z
9
value 0.00015
scoring_system epss
scoring_elements 0.03142
published_at 2026-04-16T12:55:00Z
10
value 0.00015
scoring_system epss
scoring_elements 0.03153
published_at 2026-04-18T12:55:00Z
11
value 0.00015
scoring_system epss
scoring_elements 0.03272
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-43565
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43565
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43565
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://go.dev/cl/368814
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://go.dev/cl/368814
5
reference_url https://go.dev/issues/49932
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://go.dev/issues/49932
6
reference_url https://groups.google.com/forum/#!forum/golang-announce
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://groups.google.com/forum/#!forum/golang-announce
7
reference_url https://groups.google.com/g/golang-announce/c/2AR1sKiM-Qs
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://groups.google.com/g/golang-announce/c/2AR1sKiM-Qs
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-43565
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-43565
9
reference_url https://pkg.go.dev/vuln/GO-2022-0968
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://pkg.go.dev/vuln/GO-2022-0968
10
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2030787
reference_id 2030787
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2030787
11
reference_url https://access.redhat.com/errata/RHSA-2022:1276
reference_id RHSA-2022:1276
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:1276
12
reference_url https://access.redhat.com/errata/RHSA-2022:1361
reference_id RHSA-2022:1361
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:1361
13
reference_url https://access.redhat.com/errata/RHSA-2022:1372
reference_id RHSA-2022:1372
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:1372
14
reference_url https://access.redhat.com/errata/RHSA-2022:5068
reference_id RHSA-2022:5068
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5068
15
reference_url https://access.redhat.com/errata/RHSA-2022:5069
reference_id RHSA-2022:5069
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5069
16
reference_url https://access.redhat.com/errata/RHSA-2022:5188
reference_id RHSA-2022:5188
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5188
17
reference_url https://access.redhat.com/errata/RHSA-2022:5673
reference_id RHSA-2022:5673
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5673
18
reference_url https://access.redhat.com/errata/RHSA-2022:8938
reference_id RHSA-2022:8938
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8938
19
reference_url https://access.redhat.com/errata/RHSA-2024:2944
reference_id RHSA-2024:2944
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2944
fixed_packages
aliases CVE-2021-43565, GHSA-gwc9-m7rh-j2ww
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-n34c-71wq-s3e4
2
url VCID-n89f-3nkb-ebg3
vulnerability_id VCID-n89f-3nkb-ebg3
summary
Incorrect Comparison
axios is vulnerable to Inefficient Regular Expression Complexity
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3749.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3749.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-3749
reference_id
reference_type
scores
0
value 0.08262
scoring_system epss
scoring_elements 0.92213
published_at 2026-04-04T12:55:00Z
1
value 0.08262
scoring_system epss
scoring_elements 0.92216
published_at 2026-04-07T12:55:00Z
2
value 0.08262
scoring_system epss
scoring_elements 0.92207
published_at 2026-04-02T12:55:00Z
3
value 0.08262
scoring_system epss
scoring_elements 0.92245
published_at 2026-04-18T12:55:00Z
4
value 0.08262
scoring_system epss
scoring_elements 0.92246
published_at 2026-04-16T12:55:00Z
5
value 0.08262
scoring_system epss
scoring_elements 0.922
published_at 2026-04-01T12:55:00Z
6
value 0.08262
scoring_system epss
scoring_elements 0.92234
published_at 2026-04-13T12:55:00Z
7
value 0.08262
scoring_system epss
scoring_elements 0.92237
published_at 2026-04-12T12:55:00Z
8
value 0.08262
scoring_system epss
scoring_elements 0.92231
published_at 2026-04-09T12:55:00Z
9
value 0.08262
scoring_system epss
scoring_elements 0.92228
published_at 2026-04-08T12:55:00Z
10
value 0.08468
scoring_system epss
scoring_elements 0.92375
published_at 2026-04-24T12:55:00Z
11
value 0.08468
scoring_system epss
scoring_elements 0.92371
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-3749
2
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3749
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3749
4
reference_url https://github.com/axios/axios
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/axios/axios
5
reference_url https://github.com/axios/axios/commit/5b457116e31db0e88fede6c428e969e87f290929
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/axios/axios/commit/5b457116e31db0e88fede6c428e969e87f290929
6
reference_url https://huntr.dev/bounties/1e8f07fc-c384-4ff9-8498-0690de2e8c31
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/1e8f07fc-c384-4ff9-8498-0690de2e8c31
7
reference_url https://lists.apache.org/thread.html/r075d464dce95cd13c03ff9384658edcccd5ab2983b82bfc72b62bb10@%3Ccommits.druid.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r075d464dce95cd13c03ff9384658edcccd5ab2983b82bfc72b62bb10@%3Ccommits.druid.apache.org%3E
8
reference_url https://lists.apache.org/thread.html/r216f0fd0a3833856d6a6a1fada488cadba45f447d87010024328ccf2@%3Ccommits.druid.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r216f0fd0a3833856d6a6a1fada488cadba45f447d87010024328ccf2@%3Ccommits.druid.apache.org%3E
9
reference_url https://lists.apache.org/thread.html/r3ae6d2654f92c5851bdb73b35e96b0e4e3da39f28ac7a1b15ae3aab8@%3Ccommits.druid.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r3ae6d2654f92c5851bdb73b35e96b0e4e3da39f28ac7a1b15ae3aab8@%3Ccommits.druid.apache.org%3E
10
reference_url https://lists.apache.org/thread.html/r4bf1b32983f50be00f9752214c1b53738b621be1c2b0dbd68c7f2391@%3Ccommits.druid.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r4bf1b32983f50be00f9752214c1b53738b621be1c2b0dbd68c7f2391@%3Ccommits.druid.apache.org%3E
11
reference_url https://lists.apache.org/thread.html/r7324ecc35b8027a51cb6ed629490fcd3b2d7cf01c424746ed5744bf1@%3Ccommits.druid.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r7324ecc35b8027a51cb6ed629490fcd3b2d7cf01c424746ed5744bf1@%3Ccommits.druid.apache.org%3E
12
reference_url https://lists.apache.org/thread.html/r74d0b359408fff31f87445261f0ee13bdfcac7d66f6b8e846face321@%3Ccommits.druid.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r74d0b359408fff31f87445261f0ee13bdfcac7d66f6b8e846face321@%3Ccommits.druid.apache.org%3E
13
reference_url https://lists.apache.org/thread.html/ra15d63c54dc6474b29f72ae4324bcb03038758545b3ab800845de7a1@%3Ccommits.druid.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/ra15d63c54dc6474b29f72ae4324bcb03038758545b3ab800845de7a1@%3Ccommits.druid.apache.org%3E
14
reference_url https://lists.apache.org/thread.html/rc263bfc5b53afcb7e849605478d73f5556eb0c00d1f912084e407289@%3Ccommits.druid.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rc263bfc5b53afcb7e849605478d73f5556eb0c00d1f912084e407289@%3Ccommits.druid.apache.org%3E
15
reference_url https://lists.apache.org/thread.html/rfa094029c959da0f7c8cd7dc9c4e59d21b03457bf0cedf6c93e1bb0a@%3Cdev.druid.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rfa094029c959da0f7c8cd7dc9c4e59d21b03457bf0cedf6c93e1bb0a@%3Cdev.druid.apache.org%3E
16
reference_url https://lists.apache.org/thread.html/rfc5c478053ff808671aef170f3d9fc9d05cc1fab8fb64431edc66103@%3Ccommits.druid.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rfc5c478053ff808671aef170f3d9fc9d05cc1fab8fb64431edc66103@%3Ccommits.druid.apache.org%3E
17
reference_url https://www.npmjs.com/package/axios
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.npmjs.com/package/axios
18
reference_url https://www.oracle.com/security-alerts/cpujul2022.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpujul2022.html
19
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1999784
reference_id 1999784
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1999784
20
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-3749
reference_id CVE-2021-3749
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-3749
21
reference_url https://github.com/advisories/GHSA-cph5-m8f7-6c5x
reference_id GHSA-cph5-m8f7-6c5x
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-cph5-m8f7-6c5x
22
reference_url https://access.redhat.com/errata/RHSA-2021:3694
reference_id RHSA-2021:3694
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3694
23
reference_url https://access.redhat.com/errata/RHSA-2021:4902
reference_id RHSA-2021:4902
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4902
24
reference_url https://access.redhat.com/errata/RHSA-2022:0056
reference_id RHSA-2022:0056
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0056
25
reference_url https://access.redhat.com/errata/RHSA-2022:1276
reference_id RHSA-2022:1276
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:1276
fixed_packages
aliases CVE-2021-3749, GHSA-cph5-m8f7-6c5x
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-n89f-3nkb-ebg3
3
url VCID-p2h1-hg14-3ke9
vulnerability_id VCID-p2h1-hg14-3ke9
summary
Improper Input Validation in GoGo Protobuf
An issue was discovered in GoGo Protobuf before 1.3.2. plugin/unmarshal/unmarshal.go lacks certain index validation, aka the "skippy peanut butter" issue.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3121.json
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3121.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-3121
reference_id
reference_type
scores
0
value 0.00135
scoring_system epss
scoring_elements 0.33043
published_at 2026-04-24T12:55:00Z
1
value 0.00135
scoring_system epss
scoring_elements 0.33233
published_at 2026-04-12T12:55:00Z
2
value 0.00135
scoring_system epss
scoring_elements 0.3319
published_at 2026-04-21T12:55:00Z
3
value 0.00135
scoring_system epss
scoring_elements 0.33226
published_at 2026-04-18T12:55:00Z
4
value 0.00135
scoring_system epss
scoring_elements 0.33249
published_at 2026-04-16T12:55:00Z
5
value 0.00135
scoring_system epss
scoring_elements 0.3321
published_at 2026-04-13T12:55:00Z
6
value 0.00135
scoring_system epss
scoring_elements 0.33201
published_at 2026-04-01T12:55:00Z
7
value 0.00135
scoring_system epss
scoring_elements 0.33328
published_at 2026-04-02T12:55:00Z
8
value 0.00135
scoring_system epss
scoring_elements 0.3336
published_at 2026-04-04T12:55:00Z
9
value 0.00135
scoring_system epss
scoring_elements 0.33193
published_at 2026-04-07T12:55:00Z
10
value 0.00135
scoring_system epss
scoring_elements 0.33236
published_at 2026-04-08T12:55:00Z
11
value 0.00135
scoring_system epss
scoring_elements 0.33269
published_at 2026-04-09T12:55:00Z
12
value 0.00135
scoring_system epss
scoring_elements 0.33274
published_at 2026-04-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-3121
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3121
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3121
3
reference_url https://discuss.hashicorp.com/t/hcsec-2021-23-consul-exposed-to-denial-of-service-in-gogo-protobuf-dependency/29025
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://discuss.hashicorp.com/t/hcsec-2021-23-consul-exposed-to-denial-of-service-in-gogo-protobuf-dependency/29025
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://github.com/gogo/protobuf
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/gogo/protobuf
6
reference_url https://github.com/gogo/protobuf/commit/b03c65ea87cdc3521ede29f62fe3ce239267c1bc
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/gogo/protobuf/commit/b03c65ea87cdc3521ede29f62fe3ce239267c1bc
7
reference_url https://github.com/gogo/protobuf/compare/v1.3.1...v1.3.2
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/gogo/protobuf/compare/v1.3.1...v1.3.2
8
reference_url https://lists.apache.org/thread.html/r68032132c0399c29d6cdc7bd44918535da54060a10a12b1591328bff@%3Cnotifications.skywalking.apache.org%3E
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r68032132c0399c29d6cdc7bd44918535da54060a10a12b1591328bff@%3Cnotifications.skywalking.apache.org%3E
9
reference_url https://lists.apache.org/thread.html/r88d69555cb74a129a7bf84838073b61259b4a3830190e05a3b87994e@%3Ccommits.pulsar.apache.org%3E
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r88d69555cb74a129a7bf84838073b61259b4a3830190e05a3b87994e@%3Ccommits.pulsar.apache.org%3E
10
reference_url https://lists.apache.org/thread.html/rc1e9ff22c5641d73701ba56362fb867d40ed287cca000b131dcf4a44@%3Ccommits.pulsar.apache.org%3E
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rc1e9ff22c5641d73701ba56362fb867d40ed287cca000b131dcf4a44@%3Ccommits.pulsar.apache.org%3E
11
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-3121
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-3121
12
reference_url https://pkg.go.dev/vuln/GO-2021-0053
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://pkg.go.dev/vuln/GO-2021-0053
13
reference_url https://security.netapp.com/advisory/ntap-20210219-0006
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20210219-0006
14
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1921650
reference_id 1921650
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1921650
15
reference_url https://access.redhat.com/errata/RHSA-2020:5633
reference_id RHSA-2020:5633
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:5633
16
reference_url https://access.redhat.com/errata/RHSA-2020:5635
reference_id RHSA-2020:5635
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:5635
17
reference_url https://access.redhat.com/errata/RHSA-2021:0607
reference_id RHSA-2021:0607
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0607
18
reference_url https://access.redhat.com/errata/RHSA-2021:0719
reference_id RHSA-2021:0719
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0719
19
reference_url https://access.redhat.com/errata/RHSA-2021:1005
reference_id RHSA-2021:1005
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1005
20
reference_url https://access.redhat.com/errata/RHSA-2021:1006
reference_id RHSA-2021:1006
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1006
21
reference_url https://access.redhat.com/errata/RHSA-2021:1007
reference_id RHSA-2021:1007
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1007
22
reference_url https://access.redhat.com/errata/RHSA-2021:1225
reference_id RHSA-2021:1225
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1225
23
reference_url https://access.redhat.com/errata/RHSA-2021:1227
reference_id RHSA-2021:1227
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1227
24
reference_url https://access.redhat.com/errata/RHSA-2021:1552
reference_id RHSA-2021:1552
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1552
25
reference_url https://access.redhat.com/errata/RHSA-2021:1563
reference_id RHSA-2021:1563
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1563
26
reference_url https://access.redhat.com/errata/RHSA-2021:2121
reference_id RHSA-2021:2121
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2121
27
reference_url https://access.redhat.com/errata/RHSA-2021:2136
reference_id RHSA-2021:2136
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2136
28
reference_url https://access.redhat.com/errata/RHSA-2021:2286
reference_id RHSA-2021:2286
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2286
29
reference_url https://access.redhat.com/errata/RHSA-2021:2374
reference_id RHSA-2021:2374
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2374
30
reference_url https://access.redhat.com/errata/RHSA-2021:2437
reference_id RHSA-2021:2437
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2437
31
reference_url https://access.redhat.com/errata/RHSA-2021:2438
reference_id RHSA-2021:2438
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2438
32
reference_url https://access.redhat.com/errata/RHSA-2021:2920
reference_id RHSA-2021:2920
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2920
33
reference_url https://access.redhat.com/errata/RHSA-2021:2977
reference_id RHSA-2021:2977
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2977
34
reference_url https://access.redhat.com/errata/RHSA-2021:3259
reference_id RHSA-2021:3259
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3259
35
reference_url https://access.redhat.com/errata/RHSA-2021:3262
reference_id RHSA-2021:3262
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3262
36
reference_url https://access.redhat.com/errata/RHSA-2021:3303
reference_id RHSA-2021:3303
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3303
37
reference_url https://access.redhat.com/errata/RHSA-2021:3759
reference_id RHSA-2021:3759
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3759
38
reference_url https://access.redhat.com/errata/RHSA-2021:4104
reference_id RHSA-2021:4104
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4104
39
reference_url https://access.redhat.com/errata/RHSA-2022:0056
reference_id RHSA-2022:0056
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0056
40
reference_url https://access.redhat.com/errata/RHSA-2022:0283
reference_id RHSA-2022:0283
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0283
41
reference_url https://access.redhat.com/errata/RHSA-2022:0577
reference_id RHSA-2022:0577
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0577
42
reference_url https://access.redhat.com/errata/RHSA-2022:1276
reference_id RHSA-2022:1276
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:1276
43
reference_url https://access.redhat.com/errata/RHSA-2022:1679
reference_id RHSA-2022:1679
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:1679
44
reference_url https://access.redhat.com/errata/RHSA-2022:6536
reference_id RHSA-2022:6536
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6536
45
reference_url https://access.redhat.com/errata/RHSA-2022:6916
reference_id RHSA-2022:6916
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6916
fixed_packages
aliases CVE-2021-3121, GHSA-c3h9-896r-86jm
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p2h1-hg14-3ke9
Fixing_vulnerabilities
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:rpm/redhat/kiali@1.24.7.redhat1-1%3Farch=el8