Known vulnerabilities in skopeo

Vendor: openEuler
Software: skopeo
Software CPE: cpe:2.3:o:openeuler:skopeo:*:*:*:*:*:openeuler:*:*
Total vulnerabilities: 14
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting skopeo skopeo is affected by 14 known vulnerabilities: 1 high, 11 medium, 2 low Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125945 - Improper input validation
CVE-2026-34986
CWE-20 Medium
No
No
1.1.0-16, 1.8.0-10, 1.14.2-9 14.04.2026 SB2026041463
SB2026041464
SB2026041465
and 74 more
#VU121565 - Resource exhaustion
CVE-2025-65637
CWE-400 Medium
No
No
1.1.0-16, 1.8.0-10 15.01.2026 SB2026011525
SB20260116132
SB2026011920
and 35 more
#VU118190 - Resource exhaustion
CVE-2025-58183
CWE-400 Medium
No
No
1.1.0-16, 1.8.0-10, 1.14.2-9 07.11.2025 SB2025110705
SB2025110725
SB2025110726
and 177 more
#VU114080 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-47907
CWE-362 Low
No
No
1.1.0-13, 1.8.0-7, 1.14.2-6 14.08.2025 SB2025081423
SB2025081424
SB2025081425
and 50 more
#VU105450 - Resource exhaustion
CVE-2025-27144
CWE-400 Medium
No
No
1.1.0-13, 1.8.0-7, 1.14.2-6 07.03.2025 SB2025030735
SB2025030736
SB2025030737
and 80 more
#VU98817 - UNIX Symbolic Link (Symlink) Following
CVE-2024-9676
CWE-61 Low
No
No
1.1.0-17, 1.8.0-11, 1.14.2-9 18.10.2024 SB2024101822
SB2024101823
SB2024101824
and 54 more
#VU89685 - Improper Validation of Integrity Check Value
CVE-2024-3727
CWE-354 Medium
No
No
1.14.2-6 21.05.2024 SB2024052112
SB2024052116
SB2024052117
and 68 more
#VU87538 - Resource exhaustion
CVE-2024-28180
CWE-400 Medium
No
No
1.1.0-12, 1.5.2-6, 1.5.2-7, 1.8.0-5 14.03.2024 SB2024031446
SB2024031447
SB2024031448
and 106 more
#VU82064 - Resource exhaustion
CVE-2023-39325
CWE-400 Medium
No
No
1.1.0-13, 1.8.0-7 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
1.1.0-13, 1.8.0-7 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 652 more
#VU78327 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2023-29406
CWE-644 Medium
No
No
1.5.2-6, 1.5.2-7, 1.8.0-5 17.07.2023 SB2023071737
SB2023071738
SB2023071739
and 94 more
#VU74573 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-24537
CWE-835 Medium
No
No
1.1.0-9, 1.5.2-2, 1.5.2-3 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 87 more
#VU74571 - Resource exhaustion
CVE-2023-24534
CWE-400 Medium
No
No
1.1.0-9, 1.5.2-3 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 85 more
#VU72686 - Resource exhaustion
CVE-2022-41723
CWE-400 Medium
No
No
1.5.2-4, 1.5.2-5, 1.5.2-7, 1.8.0-4 01.03.2023 SB2023030130
SB2023030131
SB2023030946
and 190 more