Login Request a demo
LI
Product
Libzypp
by Opensuse · last CVE Jul 2, 2026
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 1High 5Medium 0Low 1
Severity
All severities7Critical1High5Medium0Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Libzypp to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-44941
8.8
1%
Jul 2
libzypp path traversal via "keyhint" in repomd.xml
Affected: before 17.38.12
CVE-2026-25707
8.8
1%
Jun 29
Handcrafted repo metadata may cause arbitrary local files to be overwritten by libzypp
Affected: before 17.38.10
CVE-2017-7436
8.1
2%
Mar 1
In libzypp before 20170803 it was possible to retrieve unsigned packages without a warning to the user which could lead to man in the middle or malicious servers to inject…
Affected: through 16.15.2
CVE-2017-7435
8.1
2%
Mar 1
In libzypp before 20170803 it was possible to add unsigned YUM repositories without warning to the user that could lead to man in the middle or malicious servers to inject…
Affected: through 16.15.2
CVE-2018-7685
7.8
0%
Aug 31
The decoupled download and installation steps in libzypp before 17.5.0 could lead to a corrupted RPM being left in the cache, where a later call would not display the corrupted…
Affected: before 17.5.0
Showing 5