LI
Product
libzypp
3
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 1Low 0
Watch
Add libzypp to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-44941 | 8.8 | Jul 2 | libzypp path traversal via "keyhint" in repomd.xml Affected: before 17.38.12 |
| CVE-2026-25707 | 8.8 | Jun 29 | Handcrafted repo metadata may cause arbitrary local files to be overwritten by libzypp Affected: before 17.38.10 |
| CVE-2026-44942 | 6.5 | Jun 18 | libzypp .repo files can have an optional path which can lead to path traversal attacks Affected: 17.0.0 before 17.38.13; before 16.22.19 |
Showing 3