Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/435601?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/435601?format=api", "purl": "pkg:apk/alpine/rclone@1.69.0-r0?arch=aarch64&distroversion=edge&reponame=community", "type": "apk", "namespace": "alpine", "name": "rclone", "version": "1.69.0-r0", "qualifiers": { "arch": "aarch64", "distroversion": "edge", "reponame": "community" }, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": "1.69.2-r0", "latest_non_vulnerable_version": "1.73.5-r0", "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/14906?format=api", "vulnerability_id": "VCID-g8qg-4g78-pfgn", "summary": "Non-linear parsing of case-insensitive content in golang.org/x/net/html\nAn attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-45338.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-45338.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-45338", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.08624", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.09883", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.09811", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.09851", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.09884", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.09839", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.0969", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.09721", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.09838", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.09854", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.09809", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.09859", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.09759", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.0983", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.0989", "published_at": "2026-04-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-45338" }, { "reference_url": "https://cs.opensource.google/go/x/net", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://cs.opensource.google/go/x/net" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45338", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45338" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/golang/go/issues/70906", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/golang/go/issues/70906" }, { "reference_url": "https://go.dev/cl/637536", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-12-31T19:51:42Z/" } ], "url": "https://go.dev/cl/637536" }, { "reference_url": "https://go.dev/issue/70906", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-12-31T19:51:42Z/" } ], "url": "https://go.dev/issue/70906" }, { "reference_url": "https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-12-31T19:51:42Z/" } ], "url": "https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45338", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45338" }, { "reference_url": "https://pkg.go.dev/vuln/GO-2024-3333", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-12-31T19:51:42Z/" } ], "url": "https://pkg.go.dev/vuln/GO-2024-3333" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1091168", "reference_id": "1091168", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1091168" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333122", "reference_id": "2333122", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333122" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11037", "reference_id": "RHSA-2024:11037", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11037" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11038", "reference_id": "RHSA-2024:11038", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11038" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0048", "reference_id": "RHSA-2025:0048", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0048" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0115", "reference_id": "RHSA-2025:0115", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0115" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0121", "reference_id": "RHSA-2025:0121", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0121" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0140", "reference_id": "RHSA-2025:0140", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0140" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0224", "reference_id": "RHSA-2025:0224", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0224" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0364", "reference_id": "RHSA-2025:0364", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0364" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0370", "reference_id": "RHSA-2025:0370", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0370" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0384", "reference_id": "RHSA-2025:0384", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0384" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0385", "reference_id": "RHSA-2025:0385", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0385" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0386", "reference_id": "RHSA-2025:0386", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0386" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0390", "reference_id": "RHSA-2025:0390", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0390" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0444", "reference_id": "RHSA-2025:0444", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0444" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0445", "reference_id": "RHSA-2025:0445", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0445" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0485", "reference_id": "RHSA-2025:0485", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0485" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0522", "reference_id": "RHSA-2025:0522", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0522" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0535", "reference_id": "RHSA-2025:0535", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0535" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0536", "reference_id": "RHSA-2025:0536", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0536" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0552", "reference_id": "RHSA-2025:0552", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0552" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0560", "reference_id": "RHSA-2025:0560", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0560" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0576", "reference_id": "RHSA-2025:0576", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0576" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0577", "reference_id": "RHSA-2025:0577", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0577" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0645", "reference_id": "RHSA-2025:0645", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0645" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0646", "reference_id": "RHSA-2025:0646", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0646" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0649", "reference_id": "RHSA-2025:0649", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0649" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0650", "reference_id": "RHSA-2025:0650", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0650" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0653", "reference_id": "RHSA-2025:0653", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0653" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0654", "reference_id": "RHSA-2025:0654", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0654" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0678", "reference_id": "RHSA-2025:0678", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0678" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0679", "reference_id": "RHSA-2025:0679", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0679" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0715", "reference_id": "RHSA-2025:0715", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0715" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0754", "reference_id": "RHSA-2025:0754", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0754" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0775", "reference_id": "RHSA-2025:0775", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0775" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0778", "reference_id": "RHSA-2025:0778", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0778" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0783", "reference_id": "RHSA-2025:0783", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0783" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0785", "reference_id": "RHSA-2025:0785", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0785" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0821", "reference_id": "RHSA-2025:0821", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0821" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0827", "reference_id": "RHSA-2025:0827", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0827" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0831", "reference_id": "RHSA-2025:0831", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0831" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0832", "reference_id": "RHSA-2025:0832", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0832" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0839", "reference_id": "RHSA-2025:0839", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0839" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0840", "reference_id": "RHSA-2025:0840", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0840" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0851", "reference_id": "RHSA-2025:0851", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0851" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0875", "reference_id": "RHSA-2025:0875", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0875" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0892", "reference_id": "RHSA-2025:0892", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0892" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0905", "reference_id": "RHSA-2025:0905", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0905" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0907", "reference_id": "RHSA-2025:0907", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0907" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1013", "reference_id": "RHSA-2025:1013", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1013" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1050", "reference_id": "RHSA-2025:1050", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1050" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1051", "reference_id": "RHSA-2025:1051", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1051" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1053", "reference_id": "RHSA-2025:1053", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1053" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1115", "reference_id": "RHSA-2025:1115", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1115" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1116", "reference_id": "RHSA-2025:1116", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1116" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1119", "reference_id": "RHSA-2025:1119", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1119" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1120", "reference_id": "RHSA-2025:1120", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1120" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1123", "reference_id": "RHSA-2025:1123", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1123" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1128", "reference_id": "RHSA-2025:1128", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1128" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:11396", "reference_id": "RHSA-2025:11396", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:11396" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:11669", "reference_id": "RHSA-2025:11669", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:11669" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:11749", "reference_id": "RHSA-2025:11749", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:11749" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:12370", "reference_id": "RHSA-2025:12370", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:12370" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1289", "reference_id": "RHSA-2025:1289", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1289" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1324", "reference_id": "RHSA-2025:1324", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1324" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1331", "reference_id": "RHSA-2025:1331", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1331" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1332", "reference_id": "RHSA-2025:1332", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1332" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:13325", "reference_id": "RHSA-2025:13325", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:13325" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1333", "reference_id": "RHSA-2025:1333", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1333" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1386", "reference_id": "RHSA-2025:1386", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1386" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1448", "reference_id": "RHSA-2025:1448", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1448" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1450", "reference_id": "RHSA-2025:1450", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1450" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1451", "reference_id": "RHSA-2025:1451", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1451" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:15332", "reference_id": "RHSA-2025:15332", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:15332" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:15673", "reference_id": "RHSA-2025:15673", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:15673" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:15847", "reference_id": "RHSA-2025:15847", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:15847" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1609", "reference_id": "RHSA-2025:1609", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1609" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16483", "reference_id": "RHSA-2025:16483", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16483" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1710", "reference_id": "RHSA-2025:1710", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1710" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1711", "reference_id": "RHSA-2025:1711", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1711" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1824", "reference_id": "RHSA-2025:1824", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1824" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1829", "reference_id": "RHSA-2025:1829", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1829" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1838", "reference_id": "RHSA-2025:1838", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1838" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1841", "reference_id": "RHSA-2025:1841", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1841" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1853", "reference_id": "RHSA-2025:1853", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1853" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1865", "reference_id": "RHSA-2025:1865", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1865" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1866", "reference_id": "RHSA-2025:1866", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1866" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:21704", "reference_id": "RHSA-2025:21704", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:21704" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:22182", "reference_id": "RHSA-2025:22182", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:22182" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:22287", "reference_id": "RHSA-2025:22287", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:22287" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:23061", "reference_id": "RHSA-2025:23061", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:23061" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:23064", "reference_id": "RHSA-2025:23064", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:23064" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:2415", "reference_id": "RHSA-2025:2415", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:2415" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:2440", "reference_id": "RHSA-2025:2440", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:2440" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:2588", "reference_id": "RHSA-2025:2588", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:2588" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:2652", "reference_id": "RHSA-2025:2652", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:2652" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:2658", "reference_id": "RHSA-2025:2658", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:2658" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:2700", "reference_id": "RHSA-2025:2700", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:2700" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:2903", "reference_id": "RHSA-2025:2903", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:2903" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:2933", "reference_id": "RHSA-2025:2933", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:2933" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:3069", "reference_id": "RHSA-2025:3069", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:3069" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:3131", "reference_id": "RHSA-2025:3131", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:3131" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:3132", "reference_id": "RHSA-2025:3132", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:3132" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:3368", "reference_id": "RHSA-2025:3368", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:3368" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:3374", "reference_id": "RHSA-2025:3374", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:3374" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:3397", "reference_id": "RHSA-2025:3397", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:3397" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:3500", "reference_id": "RHSA-2025:3500", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:3500" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:3502", "reference_id": "RHSA-2025:3502", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:3502" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:3542", "reference_id": "RHSA-2025:3542", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:3542" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:3560", "reference_id": "RHSA-2025:3560", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:3560" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:3973", "reference_id": "RHSA-2025:3973", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:3973" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:4007", "reference_id": "RHSA-2025:4007", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:4007" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:7449", "reference_id": "RHSA-2025:7449", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:7449" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:7451", "reference_id": "RHSA-2025:7451", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:7451" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:8301", "reference_id": "RHSA-2025:8301", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:8301" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:8510", "reference_id": "RHSA-2025:8510", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:8510" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:9136", "reference_id": "RHSA-2025:9136", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:9136" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:9340", "reference_id": "RHSA-2025:9340", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:9340" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:9646", "reference_id": "RHSA-2025:9646", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:9646" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:9761", "reference_id": "RHSA-2025:9761", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:9761" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1730", "reference_id": "RHSA-2026:1730", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1730" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:2681", "reference_id": "RHSA-2026:2681", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:2681" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:2754", "reference_id": "RHSA-2026:2754", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:2754" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:2762", "reference_id": "RHSA-2026:2762", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:2762" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:6568", "reference_id": "RHSA-2026:6568", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:6568" }, { "reference_url": "https://usn.ubuntu.com/7197-1/", "reference_id": "USN-7197-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7197-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/435601?format=api", "purl": "pkg:apk/alpine/rclone@1.69.0-r0?arch=aarch64&distroversion=edge&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/rclone@1.69.0-r0%3Farch=aarch64&distroversion=edge&reponame=community" } ], "aliases": [ "CVE-2024-45338", "GHSA-w32m-9786-jp63" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-g8qg-4g78-pfgn" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/14649?format=api", "vulnerability_id": "VCID-mn45-w3s3-syej", "summary": "Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto\nApplications and libraries which misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass.\n\nThe documentation for ServerConfig.PublicKeyCallback says that \"A call to this function does not guarantee that the key offered is in fact used to authenticate.\" Specifically, the SSH protocol allows clients to inquire about whether a public key is acceptable before proving control of the corresponding private key. PublicKeyCallback may be called with multiple keys, and the order in which the keys were provided cannot be used to infer which key the client successfully authenticated with, if any. Some applications, which store the key(s) passed to PublicKeyCallback (or derived information) and make security relevant determinations based on it once the connection is established, may make incorrect assumptions.\n\nFor example, an attacker may send public keys A and B, and then authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B for which the attacker does not actually control the private key.\n\nSince this API is widely misused, as a partial mitigation golang.org/x/crypto@v0.31.0 enforces the property that, when successfully authenticating via public key, the last key passed to ServerConfig.PublicKeyCallback will be the key used to authenticate the connection. PublicKeyCallback will now be called multiple times with the same key, if necessary. Note that the client may still not control the last key passed to PublicKeyCallback if the connection is then authenticated with a different method, such as PasswordCallback, KeyboardInteractiveCallback, or NoClientAuth.\n\nUsers should be using the Extensions field of the Permissions return value from the various authentication callbacks to record data associated with the authentication attempt instead of referencing external state. Once the connection is established the state corresponding to the successful authentication attempt can be retrieved via the ServerConn.Permissions field. Note that some third-party libraries misuse the Permissions type by sharing it across authentication attempts; users of third-party libraries should refer to the relevant projects for guidance.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-45337.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.2", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-45337.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-45337", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.30296", "scoring_system": "epss", "scoring_elements": "0.9671", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.30296", "scoring_system": "epss", "scoring_elements": "0.9666", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.30296", "scoring_system": "epss", "scoring_elements": "0.96682", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.30296", "scoring_system": "epss", "scoring_elements": "0.96679", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.30296", "scoring_system": "epss", "scoring_elements": "0.96678", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.30296", "scoring_system": "epss", "scoring_elements": "0.9667", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.30296", "scoring_system": "epss", "scoring_elements": "0.96666", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.30296", "scoring_system": "epss", "scoring_elements": "0.96703", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.30296", "scoring_system": "epss", "scoring_elements": "0.96701", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.30296", "scoring_system": "epss", "scoring_elements": "0.96698", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.30296", "scoring_system": "epss", "scoring_elements": "0.96699", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.30296", "scoring_system": "epss", "scoring_elements": "0.96696", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.30296", "scoring_system": "epss", "scoring_elements": "0.96692", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.30296", "scoring_system": "epss", "scoring_elements": "0.96685", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-45337" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45337", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45337" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/golang/crypto", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/golang/crypto" }, { "reference_url": "https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-12-12T17:57:55Z/" } ], "url": "https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909" }, { "reference_url": "https://go.dev/cl/635315", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-12-12T17:57:55Z/" } ], "url": "https://go.dev/cl/635315" }, { "reference_url": "https://go.dev/issue/70779", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-12-12T17:57:55Z/" } ], "url": "https://go.dev/issue/70779" }, { "reference_url": "https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-12-12T17:57:55Z/" } ], "url": "https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45337", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45337" }, { "reference_url": "https://pkg.go.dev/vuln/GO-2024-3321", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-12-12T17:57:55Z/" } ], "url": "https://pkg.go.dev/vuln/GO-2024-3321" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20250131-0007", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20250131-0007" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2024/12/11/2", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2024/12/11/2" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1089754", "reference_id": "1089754", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1089754" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331720", "reference_id": "2331720", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331720" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11037", "reference_id": "RHSA-2024:11037", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11037" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11038", "reference_id": "RHSA-2024:11038", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11038" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:6121", "reference_id": "RHSA-2024:6121", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:6121" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0370", "reference_id": "RHSA-2025:0370", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0370" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0385", "reference_id": "RHSA-2025:0385", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0385" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0386", "reference_id": "RHSA-2025:0386", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0386" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0390", "reference_id": "RHSA-2025:0390", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0390" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0444", "reference_id": "RHSA-2025:0444", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0444" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0445", "reference_id": "RHSA-2025:0445", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0445" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0485", "reference_id": "RHSA-2025:0485", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0485" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0522", "reference_id": "RHSA-2025:0522", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0522" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0535", "reference_id": "RHSA-2025:0535", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0535" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0536", "reference_id": "RHSA-2025:0536", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0536" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0552", "reference_id": "RHSA-2025:0552", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0552" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0560", "reference_id": "RHSA-2025:0560", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0560" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0576", "reference_id": "RHSA-2025:0576", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0576" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0577", "reference_id": "RHSA-2025:0577", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0577" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0645", "reference_id": "RHSA-2025:0645", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0645" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0649", "reference_id": "RHSA-2025:0649", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0649" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0653", "reference_id": "RHSA-2025:0653", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0653" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0676", "reference_id": "RHSA-2025:0676", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0676" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0679", "reference_id": "RHSA-2025:0679", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0679" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0723", "reference_id": "RHSA-2025:0723", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0723" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0778", "reference_id": "RHSA-2025:0778", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0778" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0785", "reference_id": "RHSA-2025:0785", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0785" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0839", "reference_id": "RHSA-2025:0839", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0839" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0851", "reference_id": "RHSA-2025:0851", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0851" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0892", "reference_id": "RHSA-2025:0892", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:0892" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:10771", "reference_id": "RHSA-2025:10771", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:10771" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:11396", "reference_id": "RHSA-2025:11396", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:11396" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1285", "reference_id": "RHSA-2025:1285", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1285" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1287", "reference_id": "RHSA-2025:1287", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1287" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1289", "reference_id": "RHSA-2025:1289", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1289" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1322", "reference_id": "RHSA-2025:1322", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1322" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1324", "reference_id": "RHSA-2025:1324", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1324" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1325", "reference_id": "RHSA-2025:1325", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1325" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1326", "reference_id": "RHSA-2025:1326", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1326" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1327", "reference_id": "RHSA-2025:1327", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1327" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1331", "reference_id": "RHSA-2025:1331", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1331" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1332", "reference_id": "RHSA-2025:1332", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1332" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1333", "reference_id": "RHSA-2025:1333", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1333" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1448", "reference_id": "RHSA-2025:1448", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1448" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1451", "reference_id": "RHSA-2025:1451", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1451" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:15680", "reference_id": "RHSA-2025:15680", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:15680" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16160", "reference_id": "RHSA-2025:16160", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16160" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16165", "reference_id": "RHSA-2025:16165", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16165" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1710", "reference_id": "RHSA-2025:1710", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1710" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17232", "reference_id": "RHSA-2025:17232", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17232" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17657", "reference_id": "RHSA-2025:17657", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17657" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17690", "reference_id": "RHSA-2025:17690", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17690" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1824", "reference_id": "RHSA-2025:1824", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1824" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1829", "reference_id": "RHSA-2025:1829", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1829" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1841", "reference_id": "RHSA-2025:1841", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1841" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1845", "reference_id": "RHSA-2025:1845", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1845" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1847", "reference_id": "RHSA-2025:1847", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1847" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1848", "reference_id": "RHSA-2025:1848", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1848" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1849", "reference_id": "RHSA-2025:1849", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1849" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:19306", "reference_id": "RHSA-2025:19306", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:19306" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:22182", "reference_id": "RHSA-2025:22182", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:22182" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:22287", "reference_id": "RHSA-2025:22287", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:22287" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:23061", "reference_id": "RHSA-2025:23061", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:23061" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:23064", "reference_id": "RHSA-2025:23064", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:23064" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:2588", "reference_id": "RHSA-2025:2588", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:2588" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:2652", "reference_id": "RHSA-2025:2652", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:2652" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:2903", "reference_id": "RHSA-2025:2903", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:2903" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:2933", "reference_id": "RHSA-2025:2933", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:2933" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:3069", "reference_id": "RHSA-2025:3069", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:3069" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:3542", "reference_id": "RHSA-2025:3542", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:3542" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:3560", "reference_id": "RHSA-2025:3560", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:3560" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:3820", "reference_id": "RHSA-2025:3820", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:3820" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:8244", "reference_id": "RHSA-2025:8244", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:8244" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1730", "reference_id": "RHSA-2026:1730", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1730" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:2681", "reference_id": "RHSA-2026:2681", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:2681" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:2754", "reference_id": "RHSA-2026:2754", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:2754" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:2762", "reference_id": "RHSA-2026:2762", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:2762" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:6568", "reference_id": "RHSA-2026:6568", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:6568" }, { "reference_url": "https://usn.ubuntu.com/7839-1/", "reference_id": "USN-7839-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7839-1/" }, { "reference_url": "https://usn.ubuntu.com/7839-2/", "reference_id": "USN-7839-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7839-2/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/435601?format=api", "purl": "pkg:apk/alpine/rclone@1.69.0-r0?arch=aarch64&distroversion=edge&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/rclone@1.69.0-r0%3Farch=aarch64&distroversion=edge&reponame=community" } ], "aliases": [ "CVE-2024-45337", "GHSA-v778-237x-gjrc" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-mn45-w3s3-syej" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/rclone@1.69.0-r0%3Farch=aarch64&distroversion=edge&reponame=community" }