🟠 High ⏱ 15–60 min Last verified: 21 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-31150 CVE-2022-31151 CVE-2022-32210 CVE-2022-35948 CVE-2022-35949 CVE-2023-23936 CVE-2023-24807 CVE-2023-45143 +12 more Upstream summary: undici is an HTTP/1.1 client, written from scratch for Node.js. It is possible to inject CRLF […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2018-16632 CVE-2020-19002 CVE-2025-6050 CVE-2025-50481 Upstream summary: pkgsrc audit-packages flagged py{27,34,35,36,37,38}-mezzanine-[0-9]* for vulnerability class 'cross-site-scripting'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2018-16632 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟢 Low ⏱ 5–15 min Last verified: 21 March 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-25860 CVE-2026-34155 Upstream summary: The install.c module in the Pengutronix RAUC update client prior to version 1.5 has a Time-of-Check Time-of-Use vulnerability, where signature verification on an update […]
🟡 Medium ⏱ 10–30 min Last verified: 21 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-41556 CVE-2022-30292 CVE-2026-2659 CVE-2026-2661 CVE-2026-3388 CVE-2026-3389 CVE-2026-8258 CVE-2026-8261 Upstream summary: sqclass.cpp in Squirrel through 2.2.5 and 3.x through 3.1 allows an out-of-bounds read (in the core interpreter) that […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 10 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:4629 Related CVEs: CVE-2026-2447 Upstream summary: The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia […]
🟡 Medium ⏱ 10–30 min Last verified: 21 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-29361 CVE-2020-29362 CVE-2020-29363 Upstream summary: An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the p11-kit library […]
🟡 Medium ⏱ 10–30 min Last verified: 21 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-10115 CVE-2018-5996 CVE-2025-53816 Upstream summary: Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to […]
🟠 High ⏱ 15–60 min Last verified: 21 March 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8018-2 Related CVEs: CVE-2025-15367 CVE-2025-15366 CVE-2026-0865 https://bugs.launchpad.net/bugs/2143706 CVE-2025-15282 CVE-2026-0672 CVE-2025-13837 CVE-2025-11468 +12 more Upstream summary: USN-8018-1 fixed vulnerabilities in python3. That update introduced regressions. The patches for CVE-2025-15366 and CVE-2025-15367 […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 10 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:11389 Related CVEs: CVE-2026-34982 CVE-2026-28417 CVE-2026-28421 CVE-2026-33412 CVE-2025-53905 CVE-2025-53906 CVE-2026-25749 Upstream summary: Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: arbitrary […]
🟡 Medium ⏱ 10–30 min Last verified: 21 March 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8089-1 Related CVEs: CVE-2023-3978 CVE-2025-58190 CVE-2022-27664 CVE-2025-22872 CVE-2022-41723 CVE-2025-47911 CVE-2024-45338 Upstream summary: Bahruz Jabiyev, Tommaso Innocenti, Anthony Gavazzi, Steven Sprecher, and Kaan Onarlioglu discovered that servers using Go Networking could […]
