🟡 Medium ⏱ 10–30 min Last verified: 28 April 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-11424 CVE-2025-45768 CVE-2026-32597 Upstream summary: In PyJWT 1.5.0 and below the `invalid_strings` check in `HMACAlgorithm.prepare_key` does not account for all PEM encoded public keys. Specifically, the PKCS1 PEM […]
🟢 Low ⏱ 5–15 min Last verified: 27 April 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-40918 Upstream summary: Authen::SASL::Perl::DIGEST_MD5 versions 2.04 through 2.1800 for Perl generates the cnonce insecurely. The cnonce (client nonce) is generated from an MD5 hash of the PID, the […]
🟠 High ⏱ 15–60 min Last verified: 27 April 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-7069 CVE-2017-7557 CVE-2018-14663 CVE-2023-44487 CVE-2025-30193 CVE-2026-0396 CVE-2026-0397 CVE-2026-24028 +12 more Upstream summary: An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are […]
🟡 Medium ⏱ 10–30 min Last verified: 26 April 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-13645 CVE-2025-60018 CVE-2025-60019 CVE-2026-2574 Upstream summary: In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to […]
🟡 Medium ⏱ 10–30 min Last verified: 25 April 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-4433 CVE-2018-10111 CVE-2018-10112 CVE-2018-10113 CVE-2018-10114 CVE-2021-45463 CVE-2025-10921 CVE-2026-2049 +1 more Upstream summary: Multiple integer overflows in operations/external/ppm-load.c in GEGL (Generic Graphics Library) 0.2.0 allow remote attackers to cause […]
🟡 Medium ⏱ 10–30 min Last verified: 24 April 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-4454 CVE-2012-4455 CVE-2024-0914 CVE-2026-23893 CVE-2026-40253 Upstream summary: openCryptoki before 2.4.1, when using spinlocks, allows local users to create or set world-writable permissions on arbitrary files via a symlink […]
🟢 Low ⏱ 5–15 min Last verified: 22 April 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-58438 Upstream summary: internetarchive is a Python and Command-Line Interface to Archive.org In versions 5.5.0 and below, there is a directory traversal (path traversal) vulnerability in the File.download() […]
🟢 Low ⏱ 5–15 min Last verified: 20 April 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-24820 CVE-2025-23203 Upstream summary: Icinga Director is a tool designed to make Icinga 2 configuration handling easy. Not any of Icinga Director's configuration forms used to manipulate the […]
🟢 Low ⏱ 5–15 min Last verified: 19 April 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-1391 CVE-2026-3381 Upstream summary: Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS, SpamAssassin, and possibly other products, allows […]
🟡 Medium ⏱ 10–30 min Last verified: 19 April 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-10064 CVE-2014-7191 CVE-2022-24999 CVE-2025-15284 CVE-2026-2391 CVE-2026-8723 Upstream summary: The qs module before 1.0.0 does not have an option or default for specifying object depth and when parsing a […]
