Lookup for vulnerable packages by Package URL.

Purlpkg:apk/alpine/rust@1.51.0-r2?arch=armhf&distroversion=v3.23&reponame=main
Typeapk
Namespacealpine
Namerust
Version1.51.0-r2
Qualifiers
arch armhf
distroversion v3.23
reponame main
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version1.52.1-r1
Latest_non_vulnerable_version1.91.1-r2
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-7tux-etbc-j7a3
vulnerability_id VCID-7tux-etbc-j7a3
summary In the standard library in Rust before 1.52.0, a double free can occur in the Vec::from_iter function if freeing the element panics.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-31162.json
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-31162.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-31162
reference_id
reference_type
scores
0
value 0.00737
scoring_system epss
scoring_elements 0.732
published_at 2026-06-04T12:55:00Z
1
value 0.00737
scoring_system epss
scoring_elements 0.73212
published_at 2026-06-08T12:55:00Z
2
value 0.00737
scoring_system epss
scoring_elements 0.73242
published_at 2026-06-06T12:55:00Z
3
value 0.00737
scoring_system epss
scoring_elements 0.73225
published_at 2026-06-07T12:55:00Z
4
value 0.00737
scoring_system epss
scoring_elements 0.73236
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-31162
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-31162
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-31162
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1950398
reference_id 1950398
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1950398
5
reference_url https://security.archlinux.org/AVG-1801
reference_id AVG-1801
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1801
6
reference_url https://access.redhat.com/errata/RHSA-2021:3042
reference_id RHSA-2021:3042
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3042
7
reference_url https://access.redhat.com/errata/RHSA-2021:3063
reference_id RHSA-2021:3063
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3063
fixed_packages
0
url pkg:apk/alpine/rust@1.51.0-r2?arch=armhf&distroversion=v3.23&reponame=main
purl pkg:apk/alpine/rust@1.51.0-r2?arch=armhf&distroversion=v3.23&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/rust@1.51.0-r2%3Farch=armhf&distroversion=v3.23&reponame=main
aliases CVE-2021-31162
risk_score 4.4
exploitability 0.5
weighted_severity 8.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7tux-etbc-j7a3
1
url VCID-xdhv-9p4r-5bh1
vulnerability_id VCID-xdhv-9p4r-5bh1
summary In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized bytes to be exposed (or the program to crash) if the borrowed string changes after its length is checked.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-36323.json
reference_id
reference_type
scores
0
value 8.2
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-36323.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-36323
reference_id
reference_type
scores
0
value 0.01012
scoring_system epss
scoring_elements 0.77467
published_at 2026-06-04T12:55:00Z
1
value 0.01012
scoring_system epss
scoring_elements 0.77505
published_at 2026-06-09T12:55:00Z
2
value 0.01012
scoring_system epss
scoring_elements 0.77504
published_at 2026-06-06T12:55:00Z
3
value 0.01012
scoring_system epss
scoring_elements 0.77484
published_at 2026-06-08T12:55:00Z
4
value 0.01012
scoring_system epss
scoring_elements 0.77494
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-36323
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36323
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36323
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1950396
reference_id 1950396
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1950396
5
reference_url https://security.archlinux.org/AVG-1801
reference_id AVG-1801
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1801
6
reference_url https://access.redhat.com/errata/RHSA-2021:3042
reference_id RHSA-2021:3042
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3042
7
reference_url https://access.redhat.com/errata/RHSA-2021:3063
reference_id RHSA-2021:3063
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3063
fixed_packages
0
url pkg:apk/alpine/rust@1.51.0-r2?arch=armhf&distroversion=v3.23&reponame=main
purl pkg:apk/alpine/rust@1.51.0-r2?arch=armhf&distroversion=v3.23&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/rust@1.51.0-r2%3Farch=armhf&distroversion=v3.23&reponame=main
aliases CVE-2020-36323
risk_score 3.7
exploitability 0.5
weighted_severity 7.4
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xdhv-9p4r-5bh1
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:apk/alpine/rust@1.51.0-r2%3Farch=armhf&distroversion=v3.23&reponame=main