🟢 Low ⏱ 5–15 min Last verified: 26 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-31486 CVE-2026-7010 Upstream summary: HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt […]
🟡 Medium ⏱ 10–30 min Last verified: 25 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-26920 CVE-2026-25896 CVE-2026-26278 CVE-2026-27942 CVE-2026-33036 CVE-2026-33349 CVE-2026-41650 Upstream summary: fast-xml-parser before 4.1.2 allows __proto__ for Prototype Pollution. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟠 High ⏱ 15–60 min Last verified: 25 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-30130 CVE-2023-27560 CVE-2023-48795 CVE-2023-49316 CVE-2023-52892 CVE-2024-27354 CVE-2024-27355 CVE-2026-32935 +2 more Upstream summary: phpseclib before 2.0.31 and 3.x before 3.0.7 mishandles RSA PKCS#1 v1.5 signature verification. Table of contents […]
🟢 Low ⏱ 5–15 min Last verified: 25 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-34444 Upstream summary: Lupa integrates the runtimes of Lua or LuaJIT2 into CPython. In 2.6 and earlier, attribute_filter is not consistently applied when attributes are accessed through built-in […]
🟡 Medium ⏱ 10–30 min Last verified: 25 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-28924 CVE-2024-52522 CVE-2026-41176 CVE-2026-41179 Upstream summary: An issue was discovered in Rclone before 1.53.3. Due to the use of a weak random number generator, the password generator has […]
🟢 Low ⏱ 5–15 min Last verified: 24 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-39882 Upstream summary: OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to 1.43.0, the otlp HTTP exporters (traces/metrics/logs) read the full HTTP response body into an in-memory bytes.Buffer […]
🟡 Medium ⏱ 10–30 min Last verified: 22 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-7514 CVE-2016-4985 CVE-2024-44082 CVE-2024-47211 CVE-2025-44021 CVE-2026-42510 CVE-2026-42997 CVE-2026-44916 +1 more Upstream summary: OpenStack Ironic 4.2.0 through 4.2.1 does not "clean" the disk after use, which allows remote authenticated […]
🟡 Medium ⏱ 10–30 min Last verified: 20 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-35605 CVE-2022-41322 CVE-2025-43929 CVE-2026-33633 CVE-2026-33642 Upstream summary: The Graphics Protocol feature in graphics.c in kitty before 0.19.3 allows remote attackers to execute arbitrary code because a filename containing […]
🟠 High ⏱ 15–60 min Last verified: 18 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-33466 CVE-2024-22725 CVE-2025-0896 CVE-2025-15581 CVE-2026-5437 CVE-2026-5438 CVE-2026-5439 CVE-2026-5440 +5 more Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – […]
🟢 Low ⏱ 5–15 min Last verified: 17 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-0218 Upstream summary: When batch jobs are executed by pgAgent, a script is created in a temporary directory and then executed. In versions of pgAgent prior to 4.2.3, […]
