microsoft/vcpkg

microsoft/vcpkg

GitHubGitHub
GitHubgithub.com
Releases76
Frequency1 month 3 days
Last Release
Stars27.2K
C++ Library Manager for Windows, Linux, and MacOS
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2026-34054↗
7.8 HIGH—

vcpkg is a free and open-source C/C++ package manager. Prior to version 3.6.1#3, vcpkg's Windows builds of OpenSSL set openssldir to a path on the build machine, making that path be attackable later on customer machines. This issue has been patched in version 3.6.1#3.