rpm package
almalinux/yggdrasil-worker-package-manager
pkg:rpm/almalinux/yggdrasil-worker-package-manager
Vulnerabilities (3)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-32282 | Med | 6.4 | < 0.2.3-7.el10_2 | 0.2.3-7.el10_2 | Apr 8, 2026 | On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignores the AT_SYMLINK_NOFOLLOW flag, which R | |
| CVE-2026-25679 | Hig | 7.5 | < 0.2.3-5.el10_1 | 0.2.3-5.el10_1 | Mar 6, 2026 | url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. | |
| CVE-2025-61726 | Hig | 7.5 | < 0.2.3-4.el10_1 | 0.2.3-4.el10_1 | Jan 28, 2026 | The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs is generally limited by the maximum request header size, the net/http.Request.ParseForm method can parse large URL-encoded forms. Parsing a la |
- affected < 0.2.3-7.el10_2fixed 0.2.3-7.el10_2
On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignores the AT_SYMLINK_NOFOLLOW flag, which R
- affected < 0.2.3-5.el10_1fixed 0.2.3-5.el10_1
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
- affected < 0.2.3-4.el10_1fixed 0.2.3-4.el10_1
The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs is generally limited by the maximum request header size, the net/http.Request.ParseForm method can parse large URL-encoded forms. Parsing a la