Search for packages
| purl | pkg:rpm/redhat/skopeo@1:0.1.32-6.git1715c90?arch=el8_0 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 10.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-rus3-fvn9-53h9
Aliases: CVE-2019-10392 GHSA-hw6x-2qwv-rxr7 |
Improper Neutralization of Special Elements used in an OS Command in Jenkins Git Client Plugin Jenkins Git Client Plugin 2.8.4 and earlier did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command injection. | There are no reported fixed by versions. |
|
VCID-vfxz-vfmr-w3d1
Aliases: CVE-2020-8945 GHSA-m6wg-2mwg-4rfq |
GPGME Go wrapper contains Use After Free The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or potential code execution during GPG signature verification. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T14:16:26.684077+00:00 | RedHat Importer | Affected by | VCID-rus3-fvn9-53h9 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10392.json | 38.0.0 |
| 2026-04-01T14:14:03.896308+00:00 | RedHat Importer | Affected by | VCID-vfxz-vfmr-w3d1 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8945.json | 38.0.0 |