CVE-2026-21436 — eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could escape the directory set by `--destdir`. This requires the installation of a package from — CVE Database · The Intelligence Room