Threats affecting pkg:github/microsoft/vcpkg

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.8	EPSS 0.7%	CVE-2026-34054microsoft vcpkg · Uncontrolled Search Path Element High7.8EPSS 0.7%2026-03-31CVE Database V5CVE-2026-34054 CVE-2026-34054 is a high-severity vulnerability in Microsoft vcpkg, a C/C++ package manager. Prior to version 3.6.1#3, the Windows builds of OpenSSL within vcpkg set the openssldir to a path on the build machine. This configuration could be exploited on customer machines due to an uncontrolled search path element (CWE-427). The issue has been patched in version 3.6.1#3. EPSS 0.7%Vulnerability CWE-427	CVE Database V5	2026-03-31

Page 1 of 1