Login Request a demo
CP
Product
cpio
by GNU · last CVE Aug 10, 2026
15
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Vulnerabilities15In the news0Timeline
Severity mix
Critical 0High 3Medium 7Low 0
Severity
All severities15Critical0High3Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add cpio to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-38185
7.8
4%
Aug 8
GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_fgetstr integer overflow that triggers an out-of-bounds heap…
Affected: through 2.13
CVE-2019-14866
7.3
1%
Jan 7
In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives
Affected: before 2.13
CVE-2010-4226
7.2
3%
Feb 6
cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote attackers to overwrite arbitrary files via a symlink within an RPM package archive
Affected: All versions, or not specified
Showing 3