🟢 Low ⏱ 5–15 min Last verified: 20 June 2026 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: viewvc — Arbitrary server filesystem content Related CVEs: CVE-2025-54141 Upstream summary: cmpilato reports: The ViewVC standalone web server (standalone.py) is a script provided in the ViewVC distribution for the purposes […]
🟢 Low ⏱ 5–15 min Last verified: 20 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libpano13 — arbitrary memory access through format string vulnerability Related CVEs: CVE-2021-20307 Upstream summary: libpano13 developers reports: Fix crash and security issue caused by malformed filename prefix Table of contents […]
🟠 High ⏱ 15–60 min Last verified: 20 June 2026 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: openexr — multiple vulnerabilities Related CVEs: CVE-2018-18443 CVE-2018-18444 CVE-2021-20296 CVE-2021-3474 CVE-2021-3475 CVE-2021-3476 CVE-2021-3477 CVE-2021-3478 +12 more Upstream summary: Cary Phillips reports: [OpenEXR v3.4.11 is a p]atch release that addresses the […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Rocky Linux 10 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:0002 Related CVEs: CVE-2025-45582 Upstream summary: The GNU tar program can save multiple files in an archive and restore files from an archive. Security Fix(es): * tar: Tar path traversal […]
🟢 Low ⏱ 5–15 min Last verified: 20 June 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-26958 Upstream summary: filippo.io/edwards25519 is a Go library implementing the edwards25519 elliptic curve with APIs for building cryptographic primitives. In versions 1.1.0 and earlier, MultiScalarMult produces invalid results or […]
GitLab Community Edition (CE) is a complete, self-hosted DevOps platform that combines Git repository hosting, issue tracking, CI/CD pipelines, container registry, and code review in a single application. Hosting GitLab internally gives organisations full control over their source code without relying on third-party services, making it the preferred choice for teams with data sovereignty requirements […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 1.30.2-r0 📖 ~4 min read • Source: Alpine secdb entry — nginx 1.30.2-r0 Related CVEs: CVE-2026-9256 CVE-2026-42945 CVE-2026-42946 CVE-2026-42934 CVE-2026-40460 CVE-2026-27654 CVE-2026-27784 CVE-2026-32647 +12 more Upstream summary: Alpine main repository for vedge ships nginx 1.30.2-r0 which […]
🟢 Low ⏱ 5–15 min Last verified: 20 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xpm — image decoding vulnerabilities Related CVEs: CVE-2004-0687 CVE-2004-0688 Upstream summary: Chris Evans discovered several vulnerabilities in the libXpm image decoder: A stack-based buffer overflow in xpmParseColors An integer overflow […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:20920-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-67221 Upstream summary: The orjson.dumps function in orjson thru 3.11.4 does not limit recursion for deeply nested JSON documents. Table of contents Symptom & Impact […]
🟢 Low ⏱ 5–15 min Last verified: 20 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-pygments — multiple DoS vulnerabilities Related CVEs: CVE-2021-20270 CVE-2021-27291 Upstream summary: Red Hat reports: An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of […]
