CVE catalog

CVE-2026-100866

onefetch-3.0.0-1.1 on GA media

Severity: Low · CVSS 3.3CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Published: Sep 27, 2026, 1:09:52 PM UTC
Updated: Oct 9, 2026, 5:23:13 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.13% · Oct 25, 2026

These are all security issues fixed in the onefetch-3.0.0-1.1 package on the GA media of openSUSE Tumbleweed.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Opensuse	onefetch	tumbleweed	`3.0.0-1.1`	fixed
Fedora	rust-onefetch	43	`0:2.28.1-4.fc43`	fixed
Fedora	rust-onefetch	44	`0:2.28.1-4.fc44`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Opensuse	onefetch	rpm	tumbleweed	`3.0.0-1.1`	Not reported	OPENSUSE-SU-2026:12085-1	Not reported
Fedora	rust-onefetch	rpm	43	`0:2.28.1-4.fc43`	Not reported	FEDORA-2026-C71291FCDF#CVE-2026-100866	Not reported
Fedora	rust-onefetch	rpm	44	`0:2.28.1-4.fc44`	Not reported	FEDORA-2026-2770759EF0#CVE-2026-100866	Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

[onefetch]Affected
Source package: [onefetch]
Details (1)
- 2.27.1-1.4 · x86_64 · tumbleweed
  Affected · Fixed: 3.0.0-1.1
  pypi · onefetch · opensuse · tumbleweed

[Fedora 43]

[onefetch]Unknown
Source package: [rust-onefetch]
Details (4)
- 2.25.0-4.fc43 · aarch64 · 43
  Unknown
  Version impact unknown
  pypi · rust-onefetch · fedora · 43
- 2.25.0-4.fc43 · x86_64 · 43
  Unknown
  Version impact unknown
  pypi · rust-onefetch · fedora · 43
- 2.27.1-8.fc43 · aarch64 · 43
  Unknown
  Version impact unknown
  pypi · rust-onefetch · fedora · 43
- 2.27.1-8.fc43 · x86_64 · 43
  Unknown
  Version impact unknown
  pypi · rust-onefetch · fedora · 43
[rust-onefetch+default-devel]Unknown
Source package: [rust-onefetch]
Details (2)
- 2.25.0-4.fc43 · noarch · 43
  Unknown
  Version impact unknown
  pypi · rust-onefetch · fedora · 43
- 2.25.0-4.fc43 · noarch · 43
  Unknown
  Version impact unknown
  pypi · rust-onefetch · fedora · 43
[rust-onefetch-devel]Unknown
Source package: [rust-onefetch]
Details (2)
- 2.25.0-4.fc43 · noarch · 43
  Unknown
  Version impact unknown
  pypi · rust-onefetch · fedora · 43
- 2.25.0-4.fc43 · noarch · 43
  Unknown
  Version impact unknown
  pypi · rust-onefetch · fedora · 43
[rust-onefetch+fail-on-deprecated-devel]Unknown
Source package: [rust-onefetch]
Details (2)
- 2.25.0-4.fc43 · noarch · 43
  Unknown
  Version impact unknown
  pypi · rust-onefetch · fedora · 43
- 2.25.0-4.fc43 · noarch · 43
  Unknown
  Version impact unknown
  pypi · rust-onefetch · fedora · 43

[Fedora 44]

[onefetch]Unknown
Source package: [rust-onefetch]
Details (4)
- 2.27.1-2.fc44 · aarch64 · 44
  Unknown
  Version impact unknown
  pypi · rust-onefetch · fedora · 44
- 2.27.1-2.fc44 · x86_64 · 44
  Unknown
  Version impact unknown
  pypi · rust-onefetch · fedora · 44
- 2.27.1-8.fc44 · aarch64 · 44
  Unknown
  Version impact unknown
  pypi · rust-onefetch · fedora · 44
- 2.27.1-8.fc44 · x86_64 · 44
  Unknown
  Version impact unknown
  pypi · rust-onefetch · fedora · 44

Observed: Oct 23, 2026, 8:14:21 PM UTC

References

[FIRST EPSS] · [Fedora security updates (Bodhi)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]