The rsyslog Project rsyslog:

1 published vulnerability names this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2018-168818.27.0A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcHIGH 7.52.2 %