packagekit vulnerabilities
CVEs whose affected-version data names the packagekit package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-19816High· 7.1A flaw was found in PackageKit
A flaw was found in PackageKit. PackageKit skips the polkit authorization check for transactions carrying the SIMULATE (dry-run) flag. In the dnf5 backend, the RepoRemove handler ignores that contract and always executes the real transac…
▾ TwilightFedora · PackageKitEPSS 0.10%via NVD
CVE-2022-0987Low· 3.3A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files
A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files. This issue allows a local user to measure the time the methods take to execute and know whether a file owned by root or ot…
▾ Sunlitpackagekit_project · packagekitEPSS 0.26%via NVD