Vulnerabilities of GNU cpio
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-66486 | GNU cpio is vulnerable to improper encoding or escaping of output in its archive member listing functionality | 4.6 Medium | Aug 10, 2026 |
| CVE-2026-66485 | GNU cpio is vulnerable to an uncontrolled memory allocation in the make_path function at src/makepath.c | 4.6 Medium | Aug 10, 2026 |
| CVE-2026-66484 | GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality | 4.6 Medium | Aug 10, 2026 |