chris

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2021-45958 CVE-2022-31116 CVE-2022-31117 Upstream summary: pkgsrc audit-packages flagged py{27,36,37,38,39,310}-ujson-[0-9]* for vulnerability class 'stack-overflow'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-45958 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2016-9015 CVE-2018-20060 CVE-2019-11236 CVE-2019-11324 CVE-2020-26137 CVE-2021-28363 CVE-2023-43804 CVE-2025-50181  +6 more Upstream summary: pkgsrc audit-packages flagged py{27,34,35,36}-urllib3<1.18.1 for vulnerability class 'validation-bypass'. Reference: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9015 Table of contents Symptom & Impact Environment […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2020-7694 CVE-2020-7695 Upstream summary: pkgsrc audit-packages flagged py{27,36,37,38}-uvicorn<0.11.7 for vulnerability class 'escape-sequence-injection'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-7694 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]