https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:22:55.420088+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-21437 CVE-2026-21437 — eopkg vulnerable to package file list integrity bypass 2026-10-06T22:22:55.436855+00:00

Affected: getsolus eopkg

eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could include files that are not tracked by `eopkg`. This requires the installation of a package from a malicious or compromised source. Files in such packages would not be shown by `lseopkg` and related tools. The issue has been fixed in v4.4.0. Users only installing packages from the Solus repositories are not affected.