{"url":"http://public2.vulnerablecode.io/api/packages/326705?format=json","purl":"pkg:rpm/redhat/skopeo@2:1.18.1-6.rhaos4.19?arch=el9","type":"rpm","namespace":"redhat","name":"skopeo","version":"2:1.18.1-6.rhaos4.19","qualifiers":{"arch":"el9"},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":null,"latest_non_vulnerable_version":null,"affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/28151?format=json","vulnerability_id":"VCID-pmu7-at56-zfgx","summary":"","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-32280.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-32280.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2026-32280","reference_id":"","reference_type":"","scores":[{"value":"0.00021","scoring_system":"epss","scoring_elements":"0.06217","published_at":"2026-06-11T12:55:00Z"},{"value":"0.00021","scoring_system":"epss","scoring_elements":"0.06239","published_at":"2026-06-12T12:55:00Z"},{"value":"0.00021","scoring_system":"epss","scoring_elements":"0.06227","published_at":"2026-06-13T12:55:00Z"},{"value":"0.00021","scoring_system":"epss","scoring_elements":"0.06209","published_at":"2026-06-14T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-32280"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2456339","reference_id":"2456339","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2456339"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:10217","reference_id":"RHSA-2026:10217","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:10217"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:10219","reference_id":"RHSA-2026:10219","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:10219"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:10704","reference_id":"RHSA-2026:10704","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:10704"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:11507","reference_id":"RHSA-2026:11507","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:11507"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:11514","reference_id":"RHSA-2026:11514","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:11514"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:11688","reference_id":"RHSA-2026:11688","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:11688"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:13545","reference_id":"RHSA-2026:13545","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:13545"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:13791","reference_id":"RHSA-2026:13791","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:13791"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:13826","reference_id":"RHSA-2026:13826","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:13826"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:14020","reference_id":"RHSA-2026:14020","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:14020"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:14162","reference_id":"RHSA-2026:14162","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:14162"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:14200","reference_id":"RHSA-2026:14200","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:14200"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:14391","reference_id":"RHSA-2026:14391","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:14391"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:15980","reference_id":"RHSA-2026:15980","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:15980"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16021","reference_id":"RHSA-2026:16021","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16021"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16024","reference_id":"RHSA-2026:16024","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16024"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16101","reference_id":"RHSA-2026:16101","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16101"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16476","reference_id":"RHSA-2026:16476","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16476"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16477","reference_id":"RHSA-2026:16477","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16477"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16505","reference_id":"RHSA-2026:16505","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16505"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16508","reference_id":"RHSA-2026:16508","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16508"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16532","reference_id":"RHSA-2026:16532","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16532"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16534","reference_id":"RHSA-2026:16534","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16534"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16535","reference_id":"RHSA-2026:16535","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16535"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16537","reference_id":"RHSA-2026:16537","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16537"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16542","reference_id":"RHSA-2026:16542","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16542"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16874","reference_id":"RHSA-2026:16874","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16874"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16875","reference_id":"RHSA-2026:16875","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16875"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:17084","reference_id":"RHSA-2026:17084","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:17084"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:17287","reference_id":"RHSA-2026:17287","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:17287"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:18027","reference_id":"RHSA-2026:18027","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:18027"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:18032","reference_id":"RHSA-2026:18032","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:18032"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19133","reference_id":"RHSA-2026:19133","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19133"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19135","reference_id":"RHSA-2026:19135","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19135"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19144","reference_id":"RHSA-2026:19144","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19144"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19350","reference_id":"RHSA-2026:19350","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19350"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19353","reference_id":"RHSA-2026:19353","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19353"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19375","reference_id":"RHSA-2026:19375","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19375"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19450","reference_id":"RHSA-2026:19450","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19450"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19550","reference_id":"RHSA-2026:19550","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19550"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19634","reference_id":"RHSA-2026:19634","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19634"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19714","reference_id":"RHSA-2026:19714","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19714"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19715","reference_id":"RHSA-2026:19715","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19715"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19719","reference_id":"RHSA-2026:19719","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19719"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19720","reference_id":"RHSA-2026:19720","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19720"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19721","reference_id":"RHSA-2026:19721","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19721"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19722","reference_id":"RHSA-2026:19722","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19722"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19750","reference_id":"RHSA-2026:19750","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19750"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19839","reference_id":"RHSA-2026:19839","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19839"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:20556","reference_id":"RHSA-2026:20556","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:20556"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:20569","reference_id":"RHSA-2026:20569","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:20569"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:20570","reference_id":"RHSA-2026:20570","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:20570"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:20571","reference_id":"RHSA-2026:20571","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:20571"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:20607","reference_id":"RHSA-2026:20607","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:20607"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:20608","reference_id":"RHSA-2026:20608","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:20608"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:20609","reference_id":"RHSA-2026:20609","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:20609"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:21017","reference_id":"RHSA-2026:21017","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:21017"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:21338","reference_id":"RHSA-2026:21338","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:21338"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:21655","reference_id":"RHSA-2026:21655","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:21655"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:21769","reference_id":"RHSA-2026:21769","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:21769"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:21772","reference_id":"RHSA-2026:21772","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:21772"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:22130","reference_id":"RHSA-2026:22130","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:22130"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:22141","reference_id":"RHSA-2026:22141","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:22141"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:22258","reference_id":"RHSA-2026:22258","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:22258"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:22260","reference_id":"RHSA-2026:22260","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:22260"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:22268","reference_id":"RHSA-2026:22268","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:22268"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:22309","reference_id":"RHSA-2026:22309","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:22309"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:22347","reference_id":"RHSA-2026:22347","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:22347"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:22415","reference_id":"RHSA-2026:22415","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:22415"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:22422","reference_id":"RHSA-2026:22422","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:22422"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:22465","reference_id":"RHSA-2026:22465","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:22465"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:22485","reference_id":"RHSA-2026:22485","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:22485"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:22709","reference_id":"RHSA-2026:22709","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:22709"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:22713","reference_id":"RHSA-2026:22713","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:22713"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:22840","reference_id":"RHSA-2026:22840","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:22840"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:22862","reference_id":"RHSA-2026:22862","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:22862"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:22958","reference_id":"RHSA-2026:22958","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:22958"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:22959","reference_id":"RHSA-2026:22959","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:22959"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:22960","reference_id":"RHSA-2026:22960","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:22960"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:22961","reference_id":"RHSA-2026:22961","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:22961"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:22962","reference_id":"RHSA-2026:22962","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:22962"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:23102","reference_id":"RHSA-2026:23102","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:23102"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:23103","reference_id":"RHSA-2026:23103","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:23103"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:23244","reference_id":"RHSA-2026:23244","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:23244"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:23345","reference_id":"RHSA-2026:23345","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:23345"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:23361","reference_id":"RHSA-2026:23361","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:23361"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:24337","reference_id":"RHSA-2026:24337","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:24337"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:24359","reference_id":"RHSA-2026:24359","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:24359"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:24470","reference_id":"RHSA-2026:24470","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:24470"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:24478","reference_id":"RHSA-2026:24478","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:24478"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:24716","reference_id":"RHSA-2026:24716","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:24716"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:24761","reference_id":"RHSA-2026:24761","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:24761"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:24762","reference_id":"RHSA-2026:24762","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:24762"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:24853","reference_id":"RHSA-2026:24853","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:24853"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:24977","reference_id":"RHSA-2026:24977","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:24977"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:25089","reference_id":"RHSA-2026:25089","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:25089"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:25127","reference_id":"RHSA-2026:25127","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:25127"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:9385","reference_id":"RHSA-2026:9385","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:9385"}],"fixed_packages":[],"aliases":["CVE-2026-32280"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-pmu7-at56-zfgx"}],"fixing_vulnerabilities":[],"risk_score":"3.4","resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/skopeo@2:1.18.1-6.rhaos4.19%3Farch=el9"}