Skip to content
OpenAdvisories

Vendor

AOSC-Dev

1 known vulnerabilities.

Products

oma 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.2
    CVE-2026-39958

    oma-topic: name Field in Topic Manifests (topic.json) May Allow CRLF Injection

    oma is a package manager for AOSC OS. Prior to 1.25.2, oma-topics is responsible for fetching metadata for testing repositories (topics) named "Topic Manifests" ({mirror}/debs/manifest/topics.json) from remote repository servers, registering them as APT sourc…

    AOSC-Dev oma