rpm-main vulnerabilities
CVEs whose affected-version data names the rpm-main package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-84233High· 7.0A flaw was found in rpm
A flaw was found in rpm. A local attacker could supply a specially crafted `.gem` filename containing RPM macro syntax. When a user or automated workflow invokes `rpmuncompress -x` on this file, the macro expansion occurs during command …
▾ TwilightRed Hat · rpm-mainEPSS 0.19%via NVD
CVE-2026-44605Medium· 5.5Rpm: heap buffer overflow in ndb slot table parsing
A flaw was found in the RPM Package Manager (RPM). A local user could be affected by a heap buffer overflow vulnerability when processing a specially crafted NDB database file. This issue arises from an error in how RPM handles certain c…
▾ SunlitRed Hat · rpm-mainEPSS 0.18%via CVEORG