🟢 Low ⏱ 5–15 min Last verified: 13 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-1271 CVE-2026-34743 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
🟡 Medium ⏱ 10–30 min Last verified: 12 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-1084 CVE-2025-30472 CVE-2026-35091 CVE-2026-35092 Upstream summary: corosync before version 2.4.4 is vulnerable to an integer overflow in exec/totemcrypto.c. Table of contents Symptom & Impact Environment & Reproduction Root […]
🟡 Medium ⏱ 10–30 min Last verified: 12 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-1953 CVE-2022-33980 CVE-2024-29131 CVE-2024-29133 CVE-2026-45205 Upstream summary: Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes if the […]
🟡 Medium ⏱ 10–30 min Last verified: 11 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-10540 CVE-2022-3517 CVE-2026-26996 CVE-2026-27903 CVE-2026-27904 Upstream summary: Minimatch is a minimal matching utility that works by converting glob expressions into JavaScript `RegExp` objects. The primary function, `minimatch(path, pattern)` […]
🟡 Medium ⏱ 10–30 min Last verified: 10 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-35605 CVE-2022-41322 CVE-2026-33633 Upstream summary: The Graphics Protocol feature in graphics.c in kitty before 0.19.3 allows remote attackers to execute arbitrary code because a filename containing special characters […]
🟡 Medium ⏱ 10–30 min Last verified: 10 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2600 CVE-2017-1000494 CVE-2019-12107 CVE-2019-12108 CVE-2019-12109 CVE-2019-12110 CVE-2019-12111 CVE-2026-5720 Upstream summary: MiniUPnPd has information disclosure use of snprintf() Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟠 High ⏱ 15–60 min Last verified: 10 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-1000206 CVE-2018-13843 CVE-2018-13844 CVE-2018-13845 CVE-2018-14329 CVE-2020-36403 CVE-2026-31962 CVE-2026-31963 +8 more Upstream summary: samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS […]
🟢 Low ⏱ 5–15 min Last verified: 9 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-34043 Upstream summary: Serialize JavaScript to a superset of JSON that includes regular expressions and functions. Prior to version 7.0.5, there is a Denial of Service (DoS) vulnerability […]
🟢 Low ⏱ 5–15 min Last verified: 9 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-54363 CVE-2025-54364 Upstream summary: Microsoft Knack 0.12.0 allows Regular expression Denial of Service (ReDoS) in the knack.introspection module. extract_full_summary_from_signature employs an inefficient regular expression pattern: "\s(:param)\s+(.+?)\s:(.*)" that is […]
🟢 Low ⏱ 5–15 min Last verified: 9 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-47068 CVE-2026-27606 Upstream summary: Rollup is a module bundler for JavaScript. Versions prior to 2.79.2, 3.29.5, and 4.22.4 are susceptible to a DOM Clobbering vulnerability when bundling scripts […]
