🟢 Low ⏱ 5–15 min Last verified: 6 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-21270 Upstream summary: Versions less than 0.0.6 of the Node.js stringstream module are vulnerable to an out-of-bounds read because of allocation of uninitialized buffers when a number is passed […]
🟠 High ⏱ 15–60 min Last verified: 6 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-1545 CVE-2005-1546 CVE-2016-2226 CVE-2016-4487 CVE-2016-4488 CVE-2016-4489 CVE-2016-4490 CVE-2016-4492 +2 more Upstream summary: Integer overflow in the ELF parser in HT Editor before 0.8.0 allows remote attackers to execute […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1690 Related CVEs: CVE-2026-41316 Upstream summary: ERB is a templating system for Ruby. Ruby 2.7.0 (before ERB 2.2.0 was published on rubygems.org) introduced an `@_init` instance variable guard in `ERB#result` […]
🟢 Low ⏱ 5–15 min Last verified: 6 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-31486 CVE-2026-7010 Upstream summary: HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt […]
🟡 Medium ⏱ 10–30 min Last verified: 6 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-23467 CVE-2022-29021 CVE-2022-29022 CVE-2022-29023 CVE-2025-32776 Upstream summary: OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a […]
🟡 Medium ⏱ 10–30 min Last verified: 6 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-47154 CVE-2026-40198 CVE-2026-40199 CVE-2026-45190 CVE-2026-45191 Upstream summary: The Net::CIDR::Lite module before 0.22 for Perl does not properly consider extraneous zero characters at the beginning of an IP address […]
🟠 High ⏱ 15–60 min Last verified: 6 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-1098 CVE-2018-1099 CVE-2018-16886 CVE-2020-15106 CVE-2020-15112 CVE-2020-15113 CVE-2020-15114 CVE-2020-15115 +7 more Upstream summary: A cross-site request forgery flaw was found in etcd 3.3.1 and earlier. An attacker can set […]
🟢 Low ⏱ 5–15 min Last verified: 6 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-18398 CVE-2021-32563 Upstream summary: Xfce Thunar 1.6.15, when Xfce 4.12 is used, mishandles the IBus-Unikey input method for file searches within File Manager, leading to an out-of-bounds read […]
🟠 High ⏱ 15–60 min Last verified: 6 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-1300 CVE-2009-1358 CVE-2011-1829 CVE-2011-3374 CVE-2011-3634 CVE-2012-0214 CVE-2012-0954 CVE-2012-0961 +12 more Upstream summary: apt 0.7.20 does not check when the date command returns an "invalid date" error, which can […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 9 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:19345 Related CVEs: CVE-2026-21413 CVE-2026-24450 Upstream summary: LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others). Security Fix(es): * LibRaw: […]
