Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/oniguruma@6.8.2-2.1?arch=el8_9
purl pkg:rpm/redhat/oniguruma@6.8.2-2.1?arch=el8_9
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.4
Vulnerabilities affecting this package (5)
Vulnerability Summary Fixed by
VCID-j961-etd4-jfdy
Aliases:
CVE-2019-13224
Multiple vulnerabilities have been found in Oniguruma, the worst of which could result in the arbitrary execution of code. There are no reported fixed by versions.
VCID-jurp-5mrx-13ce
Aliases:
CVE-2019-19204
oniguruma: Heap-based buffer over-read in function fetch_interval_quantifier in regparse.c There are no reported fixed by versions.
VCID-khf6-r7w8-c7bm
Aliases:
CVE-2019-19203
oniguruma: Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c There are no reported fixed by versions.
VCID-p5gj-xqc9-yqar
Aliases:
CVE-2019-16163
oniguruma: Stack exhaustion in regcomp.c because of recursion in regparse.c There are no reported fixed by versions.
VCID-xzt6-6k5g-byap
Aliases:
CVE-2019-19012
oniguruma: integer overflow in search_in_range function in regexec.c leads to out-of-bounds read There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-24T12:27:06.522093+00:00 RedHat Importer Affected by VCID-xzt6-6k5g-byap https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19012.json 38.4.0
2026-04-01T14:18:33.973799+00:00 RedHat Importer Affected by VCID-j961-etd4-jfdy https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13224.json 38.0.0
2026-04-01T14:18:04.344906+00:00 RedHat Importer Affected by VCID-p5gj-xqc9-yqar https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16163.json 38.0.0
2026-04-01T14:15:17.884867+00:00 RedHat Importer Affected by VCID-jurp-5mrx-13ce https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19204.json 38.0.0
2026-04-01T14:15:17.789998+00:00 RedHat Importer Affected by VCID-khf6-r7w8-c7bm https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19203.json 38.0.0
2026-04-01T14:15:16.249179+00:00 RedHat Importer Affected by VCID-xzt6-6k5g-byap https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19012.json 38.0.0