4 matches found
APKO data falsification vulnerability
Apko is an open-source OCI image builder based on APK. Versions of Apko prior to 1.2.7 had a data manipulation vulnerability. This vulnerability stemmed from verifying the APKINDEX.tar.gz signature but failing to compare the downloaded.apk package with the checksum in the signature index. This...
7.5CVSS8.1AI score0.00234EPSS
SaveExploits0References2
EUVD-2025-48342
Malicious code in citra-lepet61-sukiwir npm...
6.6AI score
SaveExploits0
20