🟢 Low ⏱ 5–15 min Last verified: 24 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-39882 Upstream summary: OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to 1.43.0, the otlp HTTP exporters (traces/metrics/logs) read the full HTTP response body into an in-memory bytes.Buffer […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:20928-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-31900 CVE-2026-32274 Upstream summary: Black is the uncompromising Python code formatter. Black provides a GitHub action for formatting code. This action supports an option, use_pyproject: […]
🟢 Low ⏱ 5–15 min Last verified: 24 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-25614 Upstream summary: xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service (SIGSEGV) […]
🟡 Medium ⏱ 10–30 min Last verified: 24 April 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-4454 CVE-2012-4455 CVE-2024-0914 CVE-2026-23893 CVE-2026-40253 Upstream summary: openCryptoki before 2.4.1, when using spinlocks, allows local users to create or set world-writable permissions on arbitrary files via a symlink […]
🟢 Low ⏱ 5–15 min Last verified: 24 April 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8229-1 Related CVEs: CVE-2026-5958 Upstream summary: Michał Majchrowicz and Marcin Wyczechowski discovered that sed incorrectly handled symbolic links when performing in-place edits. A local attacker could possibly use this issue […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-8177 CVE-2015-3451 Upstream summary: XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences. A […]
🟠 High ⏱ 15–60 min Last verified: 24 April 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7599-1 Related CVEs: CVE-2025-50182 CVE-2025-50181 CVE-2024-37891 CVE-2018-25091 CVE-2023-43804 CVE-2023-45803 CVE-2020-26137 CVE-2018-20060 +2 more Upstream summary: Jacob Sandum discovered that urllib3 handled redirects even when they were explicitly disabled while using […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1201-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-28686 CVE-2026-28690 CVE-2026-31853 CVE-2026-28691 CVE-2026-30883 CVE-2026-28493 CVE-2026-28494 CVE-2026-28687 +12 more Upstream summary: ImageMagick is free and open-source software used for editing and manipulating digital […]
🟠 High ⏱ 15–60 min Last verified: 24 April 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8023-1 Related CVEs: CVE-2026-25210 CVE-2026-24515 CVE-2012-1148 CVE-2015-1283 CVE-2016-0718 CVE-2016-4472 CVE-2018-20843 CVE-2019-15903 +11 more Upstream summary: It was discovered that Expat, contained within the xmltok library, incorrectly handled the initialization of […]
🟠 High ⏱ 15–60 min Last verified: 24 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:1440-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-1135 Upstream summary: Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting Transfer-Encoding headers, attackers […]
