rpm-main vulnerabilities

CVEs whose affected-version data names the rpm-main package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-84233High· 7.0

1mo ago

A flaw was found in rpm

A flaw was found in rpm. A local attacker could supply a specially crafted `.gem` filename containing RPM macro syntax. When a user or automated workflow invokes `rpmuncompress -x` on this file, the macro expansion occurs during command …

▾ TwilightRed Hat · rpm-mainEPSS 0.18%via NVD