🟢 Low ⏱ 5–15 min Last verified: 28 March 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-3155 Upstream summary: A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to […]
🟡 Medium ⏱ 10–30 min Last verified: 28 March 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-14850 CVE-2019-14851 CVE-2021-3716 CVE-2025-47711 CVE-2025-47712 Upstream summary: A denial of service vulnerability was discovered in nbdkit 1.12.7, 1.14.1 and 1.15.1. An attacker could connect to the nbdkit service […]
🟢 Low ⏱ 5–15 min Last verified: 27 March 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-4068 Upstream summary: The NPM package `braces`, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In […]
🟢 Low ⏱ 5–15 min Last verified: 24 March 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-25885 Upstream summary: An issue in the getcolor function in utils.py of xhtml2pdf v0.2.13 allows attackers to cause a Regular expression Denial of Service (ReDOS) via supplying a […]
🟢 Low ⏱ 5–15 min Last verified: 23 March 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-21417 CVE-2025-56225 Upstream summary: fluidsynth is a software synthesizer based on the SoundFont 2 specifications. A use after free violation was discovered in fluidsynth, that can be triggered […]
🟠 High ⏱ 15–60 min Last verified: 20 March 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-45907 CVE-2024-31580 CVE-2024-31583 CVE-2024-48063 CVE-2025-2148 CVE-2025-2149 CVE-2025-2953 CVE-2025-2998 +12 more Upstream summary: In PyTorch before trunk/89695, torch.jit.annotations.parse_type_line can cause arbitrary code execution because eval is used unsafely. Table […]
🟡 Medium ⏱ 10–30 min Last verified: 19 March 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-9036 CVE-2016-9037 CVE-2025-6536 Upstream summary: An exploitable incorrect return value vulnerability exists in the mp_check function of Tarantool's Msgpuck library 1.0.3. A specially crafted packet can cause the […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-6104 Upstream summary: go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth […]
🟡 Medium ⏱ 10–30 min Last verified: 18 March 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-7667 CVE-2020-35572 CVE-2021-21311 CVE-2021-29625 CVE-2021-43008 CVE-2023-45195 CVE-2023-45196 CVE-2025-43960 Upstream summary: Adminer through 4.3.1 has SSRF via the server parameter. Table of contents Symptom & Impact Environment & Reproduction […]
🟢 Low ⏱ 5–15 min Last verified: 18 March 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-27305 CVE-2024-34083 Upstream summary: aiosmtpd is a reimplementation of the Python stdlib smtpd.py based on asyncio. aiosmtpd is vulnerable to inbound SMTP smuggling. SMTP smuggling is a novel […]
