Debian 11

🟡 Medium   ⏱ 10–30 min  Last verified: 18 February 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2014-1829 CVE-2014-1830 CVE-2015-2296 CVE-2018-18074 CVE-2023-32681 CVE-2024-35195 CVE-2024-47081 CVE-2026-25645 Upstream summary: Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorization header […]

🟡 Medium   ⏱ 10–30 min  Last verified: 17 February 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2026-40333 CVE-2026-40334 CVE-2026-40335 CVE-2026-40336 CVE-2026-40338 CVE-2026-40339 CVE-2026-40340 CVE-2026-40341 Upstream summary: libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, two functions in […]

🟡 Medium   ⏱ 10–30 min  Last verified: 16 February 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2011-4099 CVE-2023-2602 CVE-2023-2603 CVE-2025-1390 CVE-2026-4878 Upstream summary: The capsh program in libcap before 2.22 does not change the current working directory when the –chroot option is specified, which […]

🟢 Low   ⏱ 5–15 min  Last verified: 13 February 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2026-3029 Upstream summary: A path traversal and arbitrary file write vulnerability exist in the embedded get function in '_main_.py' in PyMuPDF version, 1.26.5. Table of contents Symptom & […]

🟢 Low   ⏱ 5–15 min  Last verified: 13 February 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-61765 Upstream summary: python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers […]

🟡 Medium   ⏱ 10–30 min  Last verified: 12 February 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-11014 CVE-2025-11015 CVE-2025-11017 Upstream summary: A security flaw has been discovered in OGRECave Ogre up to 14.4.1. This issue affects the function STBIImageCodec::encode of the file /ogre/PlugIns/STBICodec/src/OgreSTBICodec.cpp of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 11 February 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-5557 CVE-2026-1765 CVE-2026-1766 Upstream summary: A flaw was found in the tracker-miners package. A weakness in the sandbox allows a maliciously-crafted file to execute code outside the sandbox […]

🟠 High   ⏱ 15–60 min  Last verified: 11 February 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-53159 CVE-2025-24898 CVE-2025-3416 CVE-2026-41676 CVE-2026-41677 CVE-2026-41678 CVE-2026-41681 CVE-2026-41898  +2 more Upstream summary: The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 11 February 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-28154 CVE-2024-43788 CVE-2025-68157 CVE-2025-68458 Upstream summary: Webpack 5 before 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the magic comment feature. An attacker who controls a property […]

🟠 High   ⏱ 15–60 min  Last verified: 11 February 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-5397 CVE-2018-11798 CVE-2019-0205 CVE-2019-0210 CVE-2020-13949 CVE-2025-48431 CVE-2026-41602 CVE-2026-41603  +8 more Upstream summary: The Apache Thrift Go client library exposed the potential during code generation for command injection due […]