azure linux gettext vulnerabilities

Latest azure linux gettext CVEs

Newest publication first

1. CVE-2026-84243 gettext: Directory traversal via the LANGUAGE environment variable

   Published 2026-10-30

   High·CVSS 7.0 EPSS 0.30%

   The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to "..", unless the program is setuid or setgid (AT_SECURE). An attacker who can set LANGUAGE in the environment of a program...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.