Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

mport — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in mport, with AI-generated Chinese analysis, references, and POCs.

Vendor: MidnightBSD

CVE ID Title CVSS Severity Published
CVE-2026-54579 mport mirror-selection ping accepts insufficiently validated ICMP replies CWE-125 2.3 Low 2026-09-17
CVE-2026-54576 mport package installation has symlink TOCTOU in chown and chmod handling CWE-59 5.8 Medium 2026-09-17
CVE-2026-54587 mport directory asset installation is vulnerable to symlink and path traversal races CWE-59 5.8 Medium 2026-09-17
CVE-2026-54575 mport package fetch and clean paths are vulnerable to TOCTOU filesystem races CWE-78 5.8 Medium 2026-09-17
CVE-2026-54578 mport verify can compare stale checksum data after hashing failures CWE-354 2.0 Low 2026-09-17
CVE-2026-54586 mport permits repository and package mirror fetches over insecure transport CWE-319 6.0 Medium 2026-09-17
CVE-2026-54585 mport sample file handling can write outside the configured root CWE-22 6.0 Medium 2026-09-17
CVE-2026-54580 mport index decompression can leave partial or corrupt index data after zstd failures CWE-354 8.3 High 2026-09-17
CVE-2026-54582 mport package installation can overwrite existing unmanaged or differently owned files CWE-73 6.0 Medium 2026-09-17
CVE-2026-54577 mport audit can inspect the wrong package when options are present CWE-20 2.0 Low 2026-09-17
CVE-2026-54583 mport package bundle downloads allow unsafe destination filenames CWE-22 8.3 High 2026-09-17
CVE-2026-54581 mport bootstrap index fetch can continue after hash verification failure CWE-345 8.3 High 2026-09-17

All 12 known CVE vulnerabilities affecting mport with full Chinese analysis, references, and POCs where available.