🟢 Low ⏱ 5–15 min Last verified: 10 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-41147 CVE-2026-32837 Upstream summary: An out-of-bounds write vulnerability exists in the ma_dr_flac__decode_samples__lpc functionality of Miniaudio miniaudio v0.11.21. A specially crafted .flac file can lead to memory corruption. An […]
🟠 High ⏱ 15–60 min Last verified: 10 March 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-7069 CVE-2017-7557 CVE-2018-14663 CVE-2023-44487 CVE-2025-30193 CVE-2026-0396 CVE-2026-0397 CVE-2026-24028 +12 more Upstream summary: An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2026:8096 Related CVEs: CVE-2025-40909 CVE-2023-47038 Upstream summary: Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fix(es): * perl: Perl threads have a […]
🟢 Low ⏱ 5–15 min Last verified: 10 March 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-6410 Upstream summary: kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL function with a full https URL (potentially including Basic Authentication credentials, a […]
🟢 Low ⏱ 5–15 min Last verified: 10 March 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-54798 Upstream summary: tmp is a temporary file and directory creator for node.js. In versions 0.2.3 and below, tmp is vulnerable to an arbitrary temporary file / directory write […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-47278 CVE-2018-1000656 CVE-2019-1010083 CVE-2026-27205 Upstream summary: pkgsrc audit-packages flagged py{39,310,311,312,313}-flask>=3.1.0<3.1.1 for vulnerability class 'improper-access-control'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-47278 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟠 High ⏱ 15–60 min Last verified: 10 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-26130 CVE-2025-0825 CVE-2025-46728 CVE-2025-53628 CVE-2025-53629 CVE-2025-66570 CVE-2025-66577 CVE-2026-21428 +8 more Upstream summary: Versions of the package yhirose/cpp-httplib before 0.12.4 are vulnerable to CRLF Injection when untrusted user input […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 2.17.0-r0 📖 ~4 min read • Source: Alpine secdb entry — pjproject 2.17.0-r0 Related CVEs: CVE-2026-25994 CVE-2026-26203 CVE-2026-26967 CVE-2026-28799 CVE-2026-29068 CVE-2026-32942 CVE-2026-32945 CVE-2026-33069 +12 more Upstream summary: Alpine main repository for vedge ships pjproject 2.17.0-r0 which […]
🟡 Medium ⏱ 10–30 min Last verified: 10 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-15853 CVE-2018-15859 CVE-2018-15861 CVE-2018-15863 Upstream summary: Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local attackers to crash xkbcommon users […]
🟢 Low ⏱ 5–15 min Last verified: 10 March 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8621 Upstream summary: t-coffee before 11.00.8cbe486-2 allows local users to write to ~/.t_coffee globally. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
