DP
Product
dpkg
by Debian · last CVE Mar 7, 2026
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 2Medium 0Low 0
Watch

Add dpkg to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-6297
8.2
0%
Jul 1
It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as being a safe…
Affected: before 1.22.21
CVE-2026-2219
7.5
0%
Mar 7
It was discovered that dpkg-deb (a component of dpkg, the Debian package management system) does not properly validate the end of the data stream when uncompressing a…
Affected: 1.21.18 before 1.23.6
Showing 2