🟢 Low ⏱ 5–15 min Last verified: 8 July 2026 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wheel — CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Related CVEs: CVE-2026-24049 Upstream summary: https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx reports: wheel is a command line tool for manipulating Python […]
🟢 Low ⏱ 5–15 min Last verified: 8 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pygments — shell injection vulnerability Related CVEs: CVE-2015-8557 Upstream summary: NVD reports: The FontManager._get_nix_font_path function in formatters/img.py in Pygments 1.2.2 through 2.0.2 allows remote attackers to execute arbitrary commands via […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2026-3083 CVE-2026-3085 CVE-2025-47183 CVE-2025-47219 Upstream summary: pkgsrc audit-packages flagged gst-plugins1-good<1.10.2 for vulnerability class 'multiple-vulnerabilities'. Reference: https://gstreamer.freedesktop.org/releases/1.10/#1.10.2 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟠 High ⏱ 15–60 min Last verified: 8 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: nginx-devel — multiple vulnerabilities Related CVEs: CVE-2009-2629 CVE-2012-2089 CVE-2013-2028 CVE-2013-2070 CVE-2013-4547 CVE-2014-0088 CVE-2014-0133 CVE-2014-3556 +12 more Upstream summary: The nginx project reports: nginx 1.31.0 fixes multiple security issues affecting HTTP/2 […]
🟠 High ⏱ 15–60 min Last verified: 8 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: www/apache24 — Multiple vulnerabilities Related CVEs: CVE-2003-0993 CVE-2004-0113 CVE-2004-0492 CVE-2004-0747 CVE-2004-0748 CVE-2004-0751 CVE-2004-0786 CVE-2004-0809 +12 more Upstream summary: The Apache httpd project reports: mod_proxy_ajp: CVE-2026-34059, CVE-2026-34032, CVE-2026-33857, CVE-2026-28780 multiple modules: […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2026-24800 Upstream summary: pkgsrc audit-packages flagged furnace<0.6.8.3 for vulnerability class 'out-of-bounds-write'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-24800 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟢 Low ⏱ 5–15 min Last verified: 7 July 2026 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: virtualenv — CWE-59: Improper Link Resolution Before File Access ('Link Following') Related CVEs: CVE-2026-22702 Upstream summary: https://github.com/pypa/virtualenv/security/advisories/GHSA-597g-3phw-6986 reports: virtualenv is a tool for creating isolated virtual python environments. Prior to […]
🟢 Low ⏱ 5–15 min Last verified: 7 July 2026 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-strawberry-graphql — Multiple vulnerabilities Related CVEs: CVE-2026-35523 CVE-2026-35526 Upstream summary: The Strawberry GraphQL project reports: Strawberry up until version 0.312.3 is vulnerable to an authentication bypass on WebSocket subscription endpoints. […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2020-25412 CVE-2020-25559 CVE-2018-19490 CVE-2018-19491 CVE-2018-19492 CVE-2020-25969 CVE-2025-31177 CVE-2017-9670 +7 more Upstream summary: pkgsrc audit-packages flagged gnuplot<5.2.8nb10 for vulnerability class 'arbitrary-code-execution'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-25412 Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 7 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mysql-scripts — mysqlaccess insecure temporary file creation Related CVEs: CVE-2004-0457 CVE-2005-0004 Upstream summary: The Debian Security Team reports: Javier Fernández-Sanguino Peña from the Debian Security Audit Project discovered a temporary […]
