Known vulnerabilities in Bubblewrap

Vendor: Project Atomic
Software: Bubblewrap
Software CPE: cpe:2.3:a:project_atomic:bubblewrap:*:*:*:*:*:*:*:*
Website: https://www.projectatomic.io/
Total vulnerabilities: 5
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Bubblewrap Bubblewrap is affected by 5 known vulnerabilities: 1 high, 2 medium, 2 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126913 - Improper Privilege Management
CVE-2026-41163		 CWE-269 Low
No
No
 0.11.2 23.04.2026 SB2026042340
SB2026052163
SB2026052784
and 1 more
#VU96049 - UNIX Symbolic Link (Symlink) Following
CVE-2024-42472		 CWE-61 Low
No
No
 0.6.3, 0.10.0 15.08.2024 SB2024081541
SB2024081542
SB2024081553
and 29 more
#VU73856 - Improper input validation
CVE-2017-5226		 CWE-20 Medium
No
No
 0.1.5 20.03.2023 SB2017032918
SB2019032618
SB2021101519
and 8 more
#VU60007 - Improper input validation
CVE-2021-4034		 CWE-20 Medium
Available
Exploited
 0.6.0 26.01.2022 SB2022012601
SB2022012604
SB2022012605
and 51 more
#VU26553 - Permissions, Privileges, and Access Controls
CVE-2020-5291		 CWE-264 High
No
No
 0.4.1 03.04.2020 SB2020040303
SB2020040422