🟠 High ⏱ 15–60 min Last verified: 17 November 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: electron{34,35,36} — Out of bounds read and write in V8 Related CVEs: CVE-2023-0698 CVE-2023-0932 CVE-2023-2721 CVE-2023-2723 CVE-2023-2724 CVE-2023-2725 CVE-2023-2930 CVE-2023-2931 +12 more Upstream summary: Electron developers report: This update fixes […]
🟢 Low ⏱ 5–15 min Last verified: 16 November 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: vim — Improper Input Validation in Vim Related CVEs: CVE-2025-27423 Upstream summary: [email protected] reports: Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of (compressed or […]
🟢 Low ⏱ 5–15 min Last verified: 16 November 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libxml2 — Out-of-bounds memory access Related CVEs: CVE-2025-32414 Upstream summary: [email protected] reports: In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python […]
🟢 Low ⏱ 5–15 min Last verified: 16 November 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-setuptools — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Related CVEs: CVE-2025-47273 Upstream summary: https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf reports: setuptools is a package that allows users to download, build, […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2024-11235 CVE-2025-1220 CVE-2025-14177 CVE-2025-14178 CVE-2025-14180 Upstream summary: pkgsrc audit-packages flagged php83<8.3.19 for vulnerability class 'use-after-free'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-11235 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2017-3302 CVE-2016-2047 CVE-2025-30722 CVE-2025-13699 CVE-2017-10379 CVE-2020-2574 Upstream summary: pkgsrc audit-packages flagged mariadb-client<=5.5.54 for vulnerability class 'use-after-free'. Reference: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3302 Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-24294 Upstream summary: pkgsrc audit-packages flagged ruby33>=3.3<3.3.0nb1 for vulnerability class 'remote-code-execution'. Reference: https://www.ruby-lang.org/en/news/2024/03/21/rce-rdoc-cve-2024-27281/ Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2024-39331 CVE-2024-30202 CVE-2024-30203 CVE-2024-30204 CVE-2025-1244 Upstream summary: pkgsrc audit-packages flagged emacs29-nox11<29.4 for vulnerability class 'remote-user-access'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-39331 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-54368 Upstream summary: pkgsrc audit-packages flagged uv<0.8.6 for vulnerability class 'input-validation'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-54368 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟢 Low ⏱ 5–15 min Last verified: 13 November 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-pdfminer.six — Arbitrary Code Execution in pdfminer.six via Crafted PDF Input Related CVEs: CVE-2025-64512 Upstream summary: Pieter Marsman reports: pdfminer.six will execute arbitrary code from a malicious pickle file if […]
