The RPM Project yum-utils:

1 published vulnerability names this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2018-108971.1.31A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configurHIGH 8.85.6 %