🟡 Medium ⏱ 10–30 min Last verified: 31 May 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-40333 CVE-2026-40334 CVE-2026-40335 CVE-2026-40336 CVE-2026-40338 CVE-2026-40339 CVE-2026-40340 CVE-2026-40341 Upstream summary: libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, two functions in […]
🟡 Medium ⏱ 10–30 min Last verified: 31 May 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-22250 CVE-2026-22251 CVE-2026-23535 CVE-2026-42150 Upstream summary: wlc is a Weblate command-line client using Weblate's REST API. Prior to 1.17.0, the SSL verification would be skipped for some crafted […]
🟢 Low ⏱ 5–15 min Last verified: 30 May 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-1391 CVE-2026-3381 Upstream summary: Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS, SpamAssassin, and possibly other products, allows […]
🟡 Medium ⏱ 10–30 min Last verified: 30 May 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-24031 CVE-2025-24032 CVE-2025-24531 Upstream summary: PAM-PKCS#11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions 0.6.12 and prior, the pam_pkcs11 module segfaults […]
🟡 Medium ⏱ 10–30 min Last verified: 29 May 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-10540 CVE-2022-3517 CVE-2026-26996 CVE-2026-27903 CVE-2026-27904 Upstream summary: Minimatch is a minimal matching utility that works by converting glob expressions into JavaScript `RegExp` objects. The primary function, `minimatch(path, pattern)` […]
🟡 Medium ⏱ 10–30 min Last verified: 29 May 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-26916 CVE-2023-26917 CVE-2026-44673 Upstream summary: libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lys_parse_mem at lys_parse_mem.c. Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 29 May 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-21366 CVE-2021-32796 CVE-2022-37616 CVE-2022-39353 CVE-2026-34601 CVE-2026-41672 CVE-2026-41673 CVE-2026-41674 +1 more Upstream summary: xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. […]
🟡 Medium ⏱ 10–30 min Last verified: 29 May 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3560 CVE-2009-3720 CVE-2025-9301 Upstream summary: The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to cause […]
🟢 Low ⏱ 5–15 min Last verified: 28 May 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-4751 Upstream summary: NULL Pointer Dereference vulnerability in tmate-io tmate.This issue affects tmate: before 2.4.0. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟡 Medium ⏱ 10–30 min Last verified: 26 May 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-10675 CVE-2020-35381 CVE-2026-32285 Upstream summary: The Library API in buger jsonparser through 2019-12-04 allows attackers to cause a denial of service (infinite loop) via a Delete call. Table […]
