🟢 Low ⏱ 5–15 min Last verified: 8 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-1820 CVE-2015-3448 Upstream summary: REST client for Ruby (aka rest-client) before 1.8.0 allows remote attackers to conduct session fixation attacks or obtain sensitive cookie information by leveraging passage […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 2.12.6-r0 📖 ~4 min read • Source: Alpine secdb entry — nats-server 2.12.6-r0 Related CVEs: CVE-2026-33216 CVE-2026-33217 CVE-2026-33215 CVE-2026-33246 CVE-2026-33218 CVE-2026-33219 CVE-2026-33223 CVE-2026-33222 +5 more Upstream summary: Alpine community repository for vedge ships nats-server 2.12.6-r0 which […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 10.0.8-r0 📖 ~4 min read • Source: Alpine secdb entry — dotnet10-runtime 10.0.8-r0 Related CVEs: CVE-2026-32177 CVE-2026-35433 CVE-2026-32175 CVE-2026-42899 CVE-2026-40372 CVE-2026-26171 CVE-2026-32202 CVE-2026-33116 +5 more Upstream summary: Alpine community repository for vedge ships dotnet10-runtime 10.0.8-r0 which […]
🟡 Medium ⏱ 10–30 min Last verified: 8 July 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-0248 CVE-2013-2186 CVE-2014-0050 CVE-2016-1000031 CVE-2016-3092 CVE-2023-24998 CVE-2025-48976 Upstream summary: The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploaded files, […]
🟢 Low ⏱ 5–15 min Last verified: 8 July 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-15366 CVE-2025-69873 Upstream summary: An issue was discovered in ajv.validate() in Ajv (aka Another JSON Schema Validator) 6.12.2. A carefully crafted JSON schema could be provided that allows […]
🟢 Low ⏱ 5–15 min Last verified: 8 July 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-38193 Upstream summary: An issue was discovered in the ammonia crate before 3.1.0 for Rust. XSS can occur because the parsing differences for HTML, SVG, and MathML are mishandled, […]
🟢 Low ⏱ 5–15 min Last verified: 8 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-5373 Upstream summary: ldapscripts 1.4 and 1.7 sends a password as a command line argument when calling some LDAP programs, which might allow local users to read the […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 9 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:9692 Related CVEs: CVE-2025-43213 CVE-2025-43214 CVE-2025-43457 CVE-2025-43511 CVE-2025-46299 CVE-2026-20608 CVE-2026-20635 CVE-2026-20636 +12 more Upstream summary: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. […]
🟠 High ⏱ 15–60 min Last verified: 8 July 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8176-1 Related CVEs: CVE-2026-33116 CVE-2026-32178 CVE-2026-32203 CVE-2026-26171 CVE-2026-26127 CVE-2026-26130 CVE-2026-21218 CVE-2025-55247 +12 more Upstream summary: Ludvig Pedersen discovered that the System.Security.Cryptography.Xml library in .NET incorrectly handled certain XML inputs. An […]
🟠 High ⏱ 15–60 min Last verified: 8 July 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7846-1 Related CVEs: CVE-2025-62230 CVE-2025-62231 CVE-2025-62229 CVE-2025-49175 CVE-2025-49176 CVE-2025-49177 CVE-2025-49178 CVE-2025-49179 +10 more Upstream summary: Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled certain memory operations. An attacker […]
