openscap-main vulnerabilities

CVEs whose affected-version data names the openscap-main package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-85518Medium· 6.1

6d ago

Openscap: openscap: arbitrary file write via path traversal in source datastream decomposition

A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application does not properly validate relative file path attributes, leading to a path traversal vulnerability. An attacker can exploit this flaw by tric…

▾ SunlitRed Hat · openscap-mainEPSS 0.33%via CVEORG