Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/openrc@0.63.1-1?distro=trixie
Typedeb
Namespacedebian
Nameopenrc
Version0.63.1-1
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-5pwu-qt3a-xuaa
vulnerability_id VCID-5pwu-qt3a-xuaa
summary checkpath in OpenRC through 0.42.1 might allow local users to take ownership of arbitrary files because a non-terminal path component can be a symlink.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-21269
reference_id
reference_type
scores
0
value 0.0005
scoring_system epss
scoring_elements 0.15873
published_at 2026-06-04T12:55:00Z
1
value 0.0005
scoring_system epss
scoring_elements 0.15957
published_at 2026-06-05T12:55:00Z
2
value 0.0005
scoring_system epss
scoring_elements 0.15946
published_at 2026-06-06T12:55:00Z
3
value 0.0005
scoring_system epss
scoring_elements 0.15905
published_at 2026-06-07T12:55:00Z
4
value 0.0005
scoring_system epss
scoring_elements 0.15818
published_at 2026-06-08T12:55:00Z
5
value 0.0005
scoring_system epss
scoring_elements 0.1584
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-21269
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-21269
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-21269
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=973245
reference_id 973245
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=973245
fixed_packages
0
url pkg:deb/debian/openrc@0.45.2-1?distro=trixie
purl pkg:deb/debian/openrc@0.45.2-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openrc@0.45.2-1%3Fdistro=trixie
1
url pkg:deb/debian/openrc@0.45.2-2%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/openrc@0.45.2-2%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openrc@0.45.2-2%252Bdeb12u1%3Fdistro=trixie
2
url pkg:deb/debian/openrc@0.56-1?distro=trixie
purl pkg:deb/debian/openrc@0.56-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openrc@0.56-1%3Fdistro=trixie
3
url pkg:deb/debian/openrc@0.63.1-1?distro=trixie
purl pkg:deb/debian/openrc@0.63.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openrc@0.63.1-1%3Fdistro=trixie
aliases CVE-2018-21269
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5pwu-qt3a-xuaa
1
url VCID-hkcu-13e3-1bex
vulnerability_id VCID-hkcu-13e3-1bex
summary checkpath in OpenRC before 0.44.7 uses the direct output of strlen() to allocate strings, which does not account for the '\0' byte at the end of the string. This results in memory corruption. CVE-2021-42341 was introduced in git commit 63db2d99e730547339d1bdd28e8437999c380cae, which was introduced as part of OpenRC 0.44.0 development.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-42341
reference_id
reference_type
scores
0
value 0.01546
scoring_system epss
scoring_elements 0.81722
published_at 2026-06-04T12:55:00Z
1
value 0.01546
scoring_system epss
scoring_elements 0.81753
published_at 2026-06-06T12:55:00Z
2
value 0.01546
scoring_system epss
scoring_elements 0.81754
published_at 2026-06-07T12:55:00Z
3
value 0.01546
scoring_system epss
scoring_elements 0.81747
published_at 2026-06-08T12:55:00Z
4
value 0.01546
scoring_system epss
scoring_elements 0.81762
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-42341
fixed_packages
0
url pkg:deb/debian/openrc@0?distro=trixie
purl pkg:deb/debian/openrc@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openrc@0%3Fdistro=trixie
1
url pkg:deb/debian/openrc@0.42-2.1?distro=trixie
purl pkg:deb/debian/openrc@0.42-2.1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5pwu-qt3a-xuaa
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openrc@0.42-2.1%3Fdistro=trixie
2
url pkg:deb/debian/openrc@0.45.2-2%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/openrc@0.45.2-2%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openrc@0.45.2-2%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/openrc@0.56-1?distro=trixie
purl pkg:deb/debian/openrc@0.56-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openrc@0.56-1%3Fdistro=trixie
4
url pkg:deb/debian/openrc@0.63.1-1?distro=trixie
purl pkg:deb/debian/openrc@0.63.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openrc@0.63.1-1%3Fdistro=trixie
aliases CVE-2021-42341
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hkcu-13e3-1bex
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/openrc@0.63.1-1%3Fdistro=trixie