🟢 Low ⏱ 5–15 min Last verified: 8 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-33671 CVE-2026-33672 Upstream summary: Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) when […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2024:4420 Related CVEs: CVE-2024-4467 CVE-2022-40284 CVE-2023-3354 CVE-2020-35517 CVE-2025-11234 CVE-2025-49133 CVE-2024-3446 CVE-2024-7383 +12 more Upstream summary: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 6.9.3-r2 📖 ~4 min read • Source: Alpine secdb entry — qt6-qtwebengine 6.9.3-r2 Related CVEs: CVE-2025-8582 CVE-2025-24028 CVE-2025-10890 CVE-2025-10891 CVE-2025-10892 CVE-2025-9866 CVE-2025-10200 CVE-2025-10201 +12 more Upstream summary: Alpine community repository for vedge ships qt6-qtwebengine 6.9.3-r2 which […]
🟢 Low ⏱ 5–15 min Last verified: 8 July 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-1002209 Upstream summary: QuaZIP before 0.7.6 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 13.0.5-r0 📖 ~4 min read • Source: Alpine secdb entry — prosody 13.0.5-r0 Related CVEs: CVE-2026-43504 CVE-2026-43505 CVE-2026-43506 CVE-2026-43507 CVE-2021-32917 CVE-2021-32918 CVE-2021-32919 CVE-2021-32920 +3 more Upstream summary: Alpine community repository for vedge ships prosody 13.0.5-r0 which […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 3.5.3-r0 📖 ~4 min read • Source: Alpine secdb entry — prometheus 3.5.3-r0 Related CVEs: CVE-2026-42151 CVE-2026-42154 CVE-2026-40179 CVE-2022-46146 CVE-2021-29622 Upstream summary: Alpine community repository for vedge ships prometheus 3.5.3-r0 which addresses CVE-2026-42151. Table of contents […]
🟡 Medium ⏱ 10–30 min Last verified: 8 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2145 CVE-2015-3406 CVE-2015-3407 CVE-2015-3408 CVE-2015-3409 Upstream summary: The cpansign verify functionality in the Module::Signature module before 0.72 for Perl allows attackers to bypass the signature check and execute […]
🟢 Low ⏱ 5–15 min Last verified: 8 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-1820 CVE-2015-3448 Upstream summary: REST client for Ruby (aka rest-client) before 1.8.0 allows remote attackers to conduct session fixation attacks or obtain sensitive cookie information by leveraging passage […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 2.12.6-r0 📖 ~4 min read • Source: Alpine secdb entry — nats-server 2.12.6-r0 Related CVEs: CVE-2026-33216 CVE-2026-33217 CVE-2026-33215 CVE-2026-33246 CVE-2026-33218 CVE-2026-33219 CVE-2026-33223 CVE-2026-33222 +5 more Upstream summary: Alpine community repository for vedge ships nats-server 2.12.6-r0 which […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 10.0.8-r0 📖 ~4 min read • Source: Alpine secdb entry — dotnet10-runtime 10.0.8-r0 Related CVEs: CVE-2026-32177 CVE-2026-35433 CVE-2026-32175 CVE-2026-42899 CVE-2026-40372 CVE-2026-26171 CVE-2026-32202 CVE-2026-33116 +5 more Upstream summary: Alpine community repository for vedge ships dotnet10-runtime 10.0.8-r0 which […]
