Lucene search
K

16 matches found

RedhatCVE
RedhatCVE
added 2026/01/02 6:37 p.m.2 views

CVE-2026-21437

eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could include files that are not tracked by eopkg. This requires the installation of a package from a malicious or compromised source. Files in such packages would not be shown by lseopkg and...

2CVSS6.7AI score0.00002EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/02 6:37 p.m.4 views

CVE-2026-21436

eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could escape the directory set by --destdir. This requires the installation of a package from a malicious or compromised source. Files in such packages would not be installed in the path given...

5.8CVSS6.7AI score0.00006EPSS
Exploits0References1
NVD
NVD
added 2026/01/01 6:15 p.m.1 views

CVE-2026-21437

eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could include files that are not tracked by eopkg. This requires the installation of a package from a malicious or compromised source. Files in such packages would not be shown by lseopkg and...

5.5CVSS0.00002EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/01/01 6:6 p.m.1 views

CVE-2026-21437 eopkg vulnerable to package file list integrity bypass

eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could include files that are not tracked by eopkg. This requires the installation of a package from a malicious or compromised source. Files in such packages would not be shown by lseopkg and...

2CVSS6.3AI score0.00002EPSS
Exploits0References4
EUVD
EUVD
added 2026/01/01 6:6 p.m.1 views

EUVD-2026-0024

eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could include files that are not tracked by eopkg. This requires the installation of a package from a malicious or compromised source. Files in such packages would not be shown by lseopkg and...

2CVSS6.2AI score0.00002EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/01/01 6:6 p.m.21 views

CVE-2026-21437 eopkg vulnerable to package file list integrity bypass

eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could include files that are not tracked by eopkg. This requires the installation of a package from a malicious or compromised source. Files in such packages would not be shown by lseopkg and...

2CVSS0.00002EPSS
Exploits0References4
OSV
OSV
added 2026/01/01 6:6 p.m.2 views

CVE-2026-21437 eopkg vulnerable to package file list integrity bypass

eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could include files that are not tracked by eopkg. This requires the installation of a package from a malicious or compromised source. Files in such packages would not be shown by lseopkg and...

2CVSS6.4AI score0.00002EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2026/01/01 6:3 p.m.2 views

CVE-2026-21436 eopkg has Path Traversal: '../filedir' vulnerability

eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could escape the directory set by --destdir. This requires the installation of a package from a malicious or compromised source. Files in such packages would not be installed in the path given...

5.8CVSS6.3AI score0.00006EPSS
Exploits0References4
OSV
OSV
added 2026/01/01 6:3 p.m.1 views

CVE-2026-21436 eopkg has Path Traversal: '../filedir' vulnerability

eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could escape the directory set by --destdir. This requires the installation of a package from a malicious or compromised source. Files in such packages would not be installed in the path given...

5.8CVSS6.4AI score0.00006EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/01/01 6:3 p.m.19 views

CVE-2026-21436 eopkg has Path Traversal: '../filedir' vulnerability

eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could escape the directory set by --destdir. This requires the installation of a package from a malicious or compromised source. Files in such packages would not be installed in the path given...

5.8CVSS0.00006EPSS
Exploits0References4
EUVD
EUVD
added 2026/01/01 6:3 p.m.1 views

EUVD-2026-0025

eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could escape the directory set by --destdir. This requires the installation of a package from a malicious or compromised source. Files in such packages would not be installed in the path given...

5.8CVSS6.2AI score0.00006EPSS
Exploits0References4
CVE
CVE
added 2026/01/01 6:3 p.m.8 views

CVE-2026-21436

eopkg (Solus package manager) has a path traversal vulnerability in versions prior to 4.4.0. A malicious package could escape the directory set by --destdir , causing files to be installed outside the intended location on the host. The issue requires installation from a malicious or compromised s...

5.8CVSS6.3AI score0.00006EPSS
Exploits0References4Affected Software1
CNNVD
CNNVD
added 2026/01/01 12:0 a.m.1 views

eopkg 安全漏洞

eopkg is an open source package manager from GetSolus. A security vulnerability exists in eopkg versions prior to 4.4.0, which stems from the possibility that a malware package could escape the directory set by --destdir, causing files to be installed to other locations on the host...

5.8CVSS6.5AI score0.00006EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/01/01 12:0 a.m.1 views

eopkg 安全漏洞

eopkg is an open source package manager from GetSolus. A security vulnerability exists in eopkg versions prior to 4.4.0, which stems from the possibility that a malware package may contain files that are not tracked by eopkg, resulting in the relevant tools being unable to display these files...

5.5CVSS6.5AI score0.00002EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.2 views

PT-2026-1018

Name of the Vulnerable Software and Affected Versions eopkg versions prior to 4.4.0 Description eopkg, a Solus package manager implemented in python3, contains a flaw where a malicious package could include files that are not tracked by eopkg. This requires installation of a package from a...

2CVSS6.5AI score0.00002EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.2 views

PT-2026-1017

Name of the Vulnerable Software and Affected Versions eopkg versions prior to 4.4.0 Description eopkg is a package manager for Solus implemented in Python3. A malicious package could bypass the directory restrictions imposed by the --destdir option. Exploitation requires installing a package from...

5.8CVSS6.5AI score0.00006EPSS
Exploits0References9
Rows per page
Query Builder