CVE catalog

CVE-2024-0406

subfinder-2.7.0-2.1 on GA media

[CVE catalog]

Severity
High · CVSS 7.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.93% · Oct 25, 2026

These are all security issues fixed in the hauler-1.2.2-1.1 package on the GA media of openSUSE Tumbleweed.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Opensusehaulertumbleweed1.2.2-1.1fixed
Opensusesubfindertumbleweed2.7.0-2.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Opensusehaulerrpmtumbleweed1.2.2-1.1Not reportedOPENSUSE-SU-2025:14996-1Not reported
Opensusesubfinderrpmtumbleweed2.7.0-2.1Not reportedOPENSUSE-SU-2025:15004-1Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [hauler]Fixed

    Source package: [hauler]

    Details (1)

    • 2.0.3-1.1 · x86_64 · tumbleweed

      Fixed · Fixed: 1.2.2-1.1

      pypi · hauler · opensuse · tumbleweed

  • [subfinder]Fixed

    Source package: [subfinder]

    Details (1)

    • 2.13.0-1.5 · x86_64 · tumbleweed

      Fixed · Fixed: 2.7.0-2.1

      pypi · subfinder · opensuse · tumbleweed

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]