🟢 Low ⏱ 5–15 min Last verified: 13 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Arti — Security issues related to circuit construction Related CVEs: CVE-2024-35312 CVE-2024-35313 Upstream summary: Tor Project reports: When building anonymizing circuits to or from an onion service with 'lite' vanguards […]
Prometheus AlertManager is a standalone component of the Prometheus monitoring stack responsible for deduplicating, grouping, routing, and dispatching alerts to notification channels such as Slack, email, and PagerDuty. While Prometheus evaluates alerting rules and fires alerts, it is AlertManager that decides who gets notified, when, and how — preventing alert storms and on-call fatigue through […]
🟢 Low ⏱ 5–15 min Last verified: 13 March 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-45184 Upstream summary: Kdenlive before 26.04.1 allows dangerous proxy parameters when an attacker-controlled project file is used. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 9 📖 ~4 min read • Source: Rocky Linux RXSA RXSA-2026:13565 Related CVEs: CVE-2026-23136 CVE-2026-23270 CVE-2026-31402 CVE-2026-31431 CVE-2026-43077 CVE-2026-43284 CVE-2025-39766 CVE-2025-68741 +12 more Upstream summary: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security […]
🟢 Low ⏱ 5–15 min Last verified: 13 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: go — invalid headers are normalized, allowing request smuggling Related CVEs: CVE-2019-16276 Upstream summary: The Go project reports: net/http (through net/textproto) used to accept and normalize invalid HTTP/1.1 headers with […]
🟡 Medium ⏱ 10–30 min Last verified: 13 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-31038 CVE-2025-54812 CVE-2025-54813 CVE-2026-40023 Upstream summary: SQL injection in Log4cxx when using the ODBC appender to send log messages to a database. No fields sent to the database […]
🟡 Medium ⏱ 10–30 min Last verified: 13 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-35934 CVE-2023-46121 CVE-2024-38519 CVE-2026-26331 Upstream summary: yt-dlp is a command-line program to download videos from video sites. During file downloads, yt-dlp or the external downloaders that yt-dlp employs […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5082200 • MSRC update-guide entry Related CVEs: CVE-2026-32157 CVE-2026-33827 CVE-2026-33824 CVE-2026-20930 CVE-2026-25250 CVE-2026-23670 CVE-2026-26151 CVE-2026-26155 +12 more Affected components: Windows Server 2022 Windows Server 2022, 23H2 Edition (Server Core installation) Windows Server […]
🟢 Low ⏱ 5–15 min Last verified: 13 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Ansible — Ansible user credentials disclosure in ansible-connection module Related CVEs: CVE-2021-3583 CVE-2021-3620 Upstream summary: Red Hat reports: A flaw was found in Ansible Engine's ansible-connection module, where sensitive information […]
🟢 Low ⏱ 5–15 min Last verified: 13 March 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-40560 Upstream summary: Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starman incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both headers are […]
