🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 10 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2026:7005 Related CVEs: CVE-2026-25679 CVE-2025-61726 CVE-2025-61729 CVE-2025-68121 CVE-2025-26625 Upstream summary: Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while […]
🟠 High ⏱ 15–60 min Last verified: 6 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: git — Multiple vulnerabilities Related CVEs: CVE-2015-7545 CVE-2016-2324 CVE-2018-11233 CVE-2018-11235 CVE-2020-11008 CVE-2020-5260 CVE-2022-39253 CVE-2022-39260 +2 more Upstream summary: git developers reports: This update includes 2 security fixes: CVE-2023-25652: By feeding […]
🟢 Low ⏱ 5–15 min Last verified: 6 March 2026 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: spotipy — CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Related CVEs: CVE-2025-66040 Upstream summary: https://github.com/spotipy-dev/spotipy/security/advisories/GHSA-r77h-rpp9-w2xm reports: Spotipy is a Python library for the Spotify Web API. […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-12474 CVE-2026-1837 Upstream summary: pkgsrc audit-packages flagged libjxl<0.11.2 for vulnerability class 'denial-of-service'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-12474 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
🟢 Low ⏱ 5–15 min Last verified: 6 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mnGoSearch buffer overflow in UdmDocToTextBuf() Upstream summary: Jedi/Sector One <[email protected]> reported the following on the full-disclosure list: Every document is stored in multiple parts according to its sections (description, body, […]
🟠 High ⏱ 15–60 min Last verified: 6 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libssh — possible heap-buffer overflow vulnerability Related CVEs: CVE-2014-0017 CVE-2015-1782 CVE-2015-3146 CVE-2016-0739 CVE-2018-10933 CVE-2019-14889 CVE-2019-3855 CVE-2019-3856 +9 more Upstream summary: libssh security advisories: The SSH protocol keeps track of two […]
🟠 High ⏱ 15–60 min Last verified: 6 March 2026 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Vulnerability found in Expat Related CVEs: CVE-2009-3560 CVE-2009-3720 CVE-2012-6702 CVE-2013-0340 CVE-2016-0718 CVE-2016-4472 CVE-2016-5300 CVE-2016-9063 +11 more Upstream summary: Expat 2.8.1 was released yesterday. The key motivation for cutting a release […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1567 Related CVEs: CVE-2025-62518 CVE-2026-33055 CVE-2026-33056 CVE-2026-25727 Upstream summary: tar-rs is a tar archive reading/writing library for Rust. Versions 0.4.44 and below have conditional logic that skips the PAX size […]
🟢 Low ⏱ 5–15 min Last verified: 6 March 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-20839 Upstream summary: systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or using […]
🟡 Medium ⏱ 10–30 min Last verified: 6 March 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-24439 CVE-2023-40267 CVE-2023-41040 CVE-2026-42215 CVE-2026-42284 CVE-2026-44243 CVE-2026-44244 Upstream summary: All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which […]
