🟡 Medium ⏱ 10–30 min Last verified: 12 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-45296 CVE-2026-4867 CVE-2026-4923 CVE-2026-4926 Upstream summary: path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2025-1307 Related CVEs: CVE-2025-54514 CVE-2025-62626 CVE-2023-31315 CVE-2023-20593 Upstream summary: Improper isolation of shared resources on a system on a chip by a malicious local attacker with high privileges could potentially […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 0.088-r0 📖 ~4 min read • Source: Alpine secdb entry — perl-cryptx 0.088-r0 Related CVEs: CVE-2026-41564 CVE-2019-17362 Upstream summary: Alpine main repository for vedge ships perl-cryptx 0.088-r0 which addresses CVE-2026-41564. Table of contents Symptom & Impact […]
🟢 Low ⏱ 5–15 min Last verified: 12 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-22868 Upstream summary: An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. Table of contents Symptom & Impact Environment & Reproduction […]
🟢 Low ⏱ 5–15 min Last verified: 12 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-35515 Upstream summary: Insecure deserialization in sqlitedict up to v2.1.0 allows attackers to execute arbitrary code. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1685 Related CVEs: CVE-2026-22007 CVE-2026-22013 CVE-2026-22016 CVE-2026-22018 CVE-2026-22021 CVE-2026-34268 CVE-2026-34282 CVE-2026-21925 +12 more Upstream summary: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product […]
🟠 High ⏱ 15–60 min Last verified: 12 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-35338 CVE-2026-35339 CVE-2026-35340 CVE-2026-35341 CVE-2026-35342 CVE-2026-35343 CVE-2026-35344 CVE-2026-35345 +12 more Upstream summary: A vulnerability in the chmod utility of uutils coreutils allows users to bypass the –preserve-root safety […]
🟠 High ⏱ 15–60 min Last verified: 12 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-0038 CVE-2005-0428 CVE-2005-2301 CVE-2005-2302 CVE-2006-4251 CVE-2008-3337 CVE-2008-5277 CVE-2012-0206 +12 more Upstream summary: The DNS implementation of PowerDNS 2.9.16 and earlier allows remote attackers to cause a denial of […]
🟡 Medium ⏱ 10–30 min Last verified: 12 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-11143 CVE-2025-1948 CVE-2025-5115 CVE-2026-1605 CVE-2026-2332 CVE-2026-5795 Upstream summary: The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs. Differential parsing of […]
🟢 Low ⏱ 5–15 min Last verified: 12 April 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-24359 Upstream summary: ASTEVAL is an evaluator of Python expressions and statements. Prior to version 1.0.6, if an attacker can control the input to the `asteval` library, they […]
