Skip to content
OpenAdvisories

Vendor

getsolus

2 known vulnerabilities.

Products

eopkg 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.0
    CVE-2026-21437 Public exploit

    eopkg vulnerable to package file list integrity bypass

    eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could include files that are not tracked by `eopkg`. This requires the installation of a package from a malicious or compromised source. Files in such pac…

    getsolus eopkg
  • Medium 5.8
    CVE-2026-21436 Public exploit

    eopkg has Path Traversal: '../filedir' vulnerability

    eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could escape the directory set by `--destdir`. This requires the installation of a package from a malicious or compromised source. Files in such packages …

    getsolus eopkg