Debian dpkg vulnerabilities

3 published CVEs name Debian dpkg among the affected products.

All 3 in the list Atom feed of new CVEs

Published CVEs: 3
Last 12 months: 1
Critical: 1
Known exploited: 0

Critical 1High 2Medium 0Low 0Not scored 0

CVEs per yearBy the year they were published

20221
20251
20261

Newest CVEs

CVE-2026-2219
It was discovered that dpkg-deb (a component of dpkg, the Debian package management system) does not properly validate the end of the data stream when…
Debian · dpkg
High7.5
CVE-2025-6297
dpkg-deb: Fix cleanup for control member with restricted directories
Debian · dpkg
High8.2
CVE-2022-1664
directory traversal for in-place extracts with untrusted v2 and v3 source packages with debian.tar
Debian · dpkg
Critical9.8

Most common weaknesses