PackageKit
4 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-19816 | 1.3.4 – < 1.4.0 | PackageKit: dnf5 backend ignores SIMULATE on RepoRemove | HIGH 7.1 | 0.1 % | ||
| CVE-2026-10294 | 1.3.0 ; 1.3.1 ; 1.3.2 ; … | PackageKit API pk-transaction.c g_file_test improper authorization | MEDIUM 5.3 | 0.2 % | ||
| CVE-2024-0217 | 1.2.0 – < 1.2.7 | Packagekitd: use-after-free in idle function callback | LOW 3.3 | 0.2 % | ||
| CVE-2022-0987 | All PackageKit versions | A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files. This issue allows a local | LOW 3.3 | 0.3 % |