CVE-2026-2219High 7.5It was discovered that dpkg-deb (a component of dpkg, the Debian package management system) does not properly validate the end of the data stream when uncompressing a zstd-compressed .deb archive, whi0.5%
CVE-2025-6297High 8.2dpkg-deb: Fix cleanup for control member with restricted directories0.5%
CVE-2022-1664Unrateddirectory traversal for in-place extracts with untrusted v2 and v3 source packages with debian.tar3.2%