Approved changes feed: RSS · Atom

cpe:2.3:a:getmonero:monero:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGetmonero (8bf2fa0b-c91e-58ee-99ff-08e57529bf6d)
ProductMonero (ca6e6d08-2aa9-5ccc-a15e-83cf23e226d4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/monero purl2cpe 2026-06-01 10:14:59.624686
pkg:deb/ubuntu/monero purl2cpe 2026-06-01 10:14:59.624689
pkg:github/monero-project/monero purl2cpe 2026-06-01 10:14:59.624691
pkg:rpm/opensuse/monero purl2cpe 2026-06-01 10:14:59.624694
pkg:sourceforge/monero.mirror purl2cpe 2026-06-01 10:14:59.624697

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-26819 vulnerable 2026-06-08 07:14:50.550639 Details available
HIGH (8.6)
Monero through 0.18.3.4 before ec74ff4 does not have response limits on HTTP server connections.
Published: 2025-02-14T00:00:00.000Z
Updated: 2025-02-18T16:29:36.927Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-26947 vulnerable 2026-06-08 05:23:51.989610 Details available
monero-wallet-gui in Monero GUI before 0.17.1.0 includes the . directory in an embedded RPATH (with a preference ahead of /usr/lib), which allows local users to gain privileges via a Trojan horse library in the current working directory.
Published: 2020-10-10T20:05:49.000Z
Updated: 2024-08-04T16:03:23.167Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.