Package · Debian

buildstream

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Critical 9.8

CVE-2026-82331

Apache BuildStream: tar source extraction escape

Improper link resolution before file access ('link following') vulnerability in the `tar` source plugin of Apache BuildStream running on Python < 3.12 allows malicious source tarballs to write files on the host, with the privileges of the user running BuildSt…

Apache Software Foundation Apache BuildStream buildstream buildstream Debian Ubuntu

Sep 23, 2026