🟠 High ⏱ 15–60 min Last verified: 16 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-36464 CVE-2025-55197 CVE-2026-22690 CVE-2026-22691 CVE-2026-24688 CVE-2026-27024 CVE-2026-27025 CVE-2026-27026 +12 more Upstream summary: pypdf is an open source, pure-python PDF library. In affected versions an attacker may craft a […]
🟡 Medium ⏱ 10–30 min Last verified: 14 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-16165 CVE-2019-16166 CVE-2020-23856 CVE-2023-2789 CVE-2025-8735 CVE-2025-8736 Upstream summary: GNU cflow through 1.6 has a use-after-free in the reference function in parser.c. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 14 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-40983 CVE-2022-43591 CVE-2025-12385 Upstream summary: An integer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2. A specially-crafted javascript code can trigger an […]
🟢 Low ⏱ 5–15 min Last verified: 13 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-6862 Upstream summary: A flaw was found in libefiboot, a component of efivar. The device path node parser in libefiboot fails to validate that each node's Length field […]
🟢 Low ⏱ 5–15 min Last verified: 12 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-1425 Upstream summary: A security flaw has been discovered in pymumu SmartDNS up to 47.1. This vulnerability affects the function _dns_decode_rr_head/_dns_decode_SVCB_HTTPS of the file src/dns.c of the component […]
🟢 Low ⏱ 5–15 min Last verified: 12 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-53603 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 10–30 min Last verified: 11 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-3153 CVE-2024-2182 CVE-2025-0650 CVE-2026-5265 CVE-2026-5367 Upstream summary: A flaw was found in Open Virtual Network where the service monitor MAC does not properly rate limit. This issue could […]
🟢 Low ⏱ 5–15 min Last verified: 11 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-40932 Upstream summary: Apache::SessionX versions through 2.01 for Perl create insecure session id. Apache::SessionX generates session ids insecurely. The default session id generator in Apache::SessionX::Generate::MD5 returns a MD5 […]
🟡 Medium ⏱ 10–30 min Last verified: 9 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-6472 CVE-2019-6473 CVE-2019-6474 CVE-2025-32801 CVE-2025-32802 CVE-2025-32803 CVE-2026-3608 Upstream summary: A packet containing a malformed DUID can cause the Kea DHCPv6 server process (kea-dhcp6) to exit due to an […]
🟢 Low ⏱ 5–15 min Last verified: 8 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-25860 CVE-2026-34155 Upstream summary: The install.c module in the Pengutronix RAUC update client prior to version 1.5 has a Time-of-Check Time-of-Use vulnerability, where signature verification on an update […]
