Skip to content

Vendor

getsolus vulnerabilities

2 published CVES affecting getsolus, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
1
Low
1
Unscored
0
CISA KEV
0
Atom feed of getsolus alerts

Products

Latest getsolus CVEs

Newest publication first

  1. CVE-2026-21437 eopkg vulnerable to package file list integrity bypass

    Published
    LowCVSS 2.0

    eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could include files that are not tracked by eopkg. This requires the installation of a package from a malicious or compromised source. Files in such packages would not be show...

  2. CVE-2026-21436 eopkg has Path Traversal: '../filedir' vulnerability

    Published
    MediumCVSS 5.8

    eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could escape the directory set by --destdir. This requires the installation of a package from a malicious or compromised source. Files in such packages would not be installed...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.