🟠 High ⏱ 15–60 min Last verified: 19 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-14751 CVE-2021-3828 CVE-2021-3842 CVE-2021-43854 CVE-2024-39705 CVE-2025-14009 CVE-2026-0846 CVE-2026-0847 +4 more Upstream summary: NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files […]
🟢 Low ⏱ 5–15 min Last verified: 19 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-35936 CVE-2025-51591 Upstream summary: Pandoc is a Haskell library for converting from one markup format to another, and a command-line tool that uses this library. Starting in version […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2025:3388 Related CVEs: CVE-2025-27516 CVE-2024-56326 CVE-2023-40217 CVE-2023-24329 CVE-2024-34064 CVE-2022-40897 CVE-2022-48560 CVE-2022-48565 +12 more Upstream summary: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic […]
🟡 Medium ⏱ 10–30 min Last verified: 19 April 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-23648 CVE-2021-35513 CVE-2021-43861 CVE-2022-31108 CVE-2022-48345 CVE-2026-41148 CVE-2026-41149 Upstream summary: The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting (XSS) due to improper sanitization in sanitizeUrl function. Table […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:15088-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-47711 CVE-2025-47712 CVE-2021-3716 Upstream summary: There's a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If […]
🟡 Medium ⏱ 10–30 min Last verified: 19 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-10099 CVE-2016-10100 CVE-2017-15914 CVE-2023-36811 Upstream summary: Borg (aka BorgBackup) before 1.0.9 has a flaw in the cryptographic protocol used to authenticate the manifest (list of archives), potentially allowing […]
🟢 Low ⏱ 5–15 min Last verified: 19 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-14511 CVE-2020-29050 Upstream summary: Sphinx Technologies Sphinx 3.1.1 by default has no authentication and listens on 0.0.0.0, making it exposed to the internet (unless filtered by a firewall […]
🟡 Medium ⏱ 10–30 min Last verified: 19 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-1152 CVE-2013-6393 CVE-2014-2525 CVE-2014-9130 CVE-2025-40908 Upstream summary: Multiple format string vulnerabilities in the error reporting functionality in the YAML::LibYAML (aka YAML-LibYAML and perl-YAML-LibYAML) module 0.38 for Perl allow […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 10 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:7080 Related CVEs: CVE-2026-1525 CVE-2026-1526 CVE-2026-1528 CVE-2026-21710 CVE-2026-2229 CVE-2026-25547 CVE-2026-26996 CVE-2026-27135 +7 more Upstream summary: Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network […]
🟢 Low ⏱ 5–15 min Last verified: 19 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8872 CVE-2016-4804 Upstream summary: The set_fat function in fat.c in dosfstools before 4.0 might allow attackers to corrupt a FAT12 filesystem or cause a denial of service (invalid […]
