🟢 Low ⏱ 5–15 min Last verified: 19 May 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-6258 Upstream summary: A security vulnerability has been identified in the pkcs11-provider, which is associated with Public-Key Cryptography Standards (PKCS#11). If exploited successfully, this vulnerability could result in a […]
🟠 High ⏱ 15–60 min Last verified: 19 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-1516 CVE-2016-1517 CVE-2017-1000450 CVE-2017-12597 CVE-2017-12598 CVE-2017-12599 CVE-2017-12600 CVE-2017-12601 +12 more Upstream summary: OpenCV 3.0.0 has a double free issue that allows attackers to execute arbitrary code. Table of […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2026-28681 Upstream summary: pkgsrc audit-packages flagged irrd<4.4.5 for vulnerability class 'open-redirect'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-28681 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟢 Low ⏱ 5–15 min Last verified: 19 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-34080 Upstream summary: xdg-dbus-proxy is a filtering proxy for D-Bus connections. Prior to 0.1.7, a policy parser vulnerability allows bypassing eavesdrop restrictions. The proxy checks for eavesdrop=true in […]
🟠 High ⏱ 15–60 min Last verified: 19 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-7285 CVE-2016-3674 CVE-2017-7957 CVE-2019-10173 CVE-2020-26217 CVE-2020-26258 CVE-2020-26259 CVE-2021-21341 +12 more Upstream summary: Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been […]
🟢 Low ⏱ 5–15 min Last verified: 19 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-4956 CVE-2009-4664 Upstream summary: fwb_install in fwbuilder 2.1.19 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ssh-agent.##### temporary file. Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2026-25679 CVE-2026-27137 CVE-2026-27138 CVE-2026-27142 CVE-2026-27139 Upstream summary: pkgsrc audit-packages flagged go126<1.26.1 for vulnerability class 'input-validation'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-25679 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟡 Medium ⏱ 10–30 min Last verified: 19 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-69194 CVE-2025-69195 CVE-2026-1858 Upstream summary: A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metalink […]
🟡 Medium ⏱ 10–30 min Last verified: 19 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-24762 CVE-2024-53981 CVE-2026-24486 CVE-2026-40347 CVE-2026-42561 Upstream summary: `python-multipart` is a streaming multipart parser for Python. When using form data, `python-multipart` uses a Regular Expression to parse the HTTP […]
🟢 Low ⏱ 5–15 min Last verified: 19 May 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-8945 Upstream summary: The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This […]
