🟡 Medium ⏱ 10–30 min Last verified: 4 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-45958 CVE-2022-31116 CVE-2022-31117 CVE-2026-32874 CVE-2026-32875 Upstream summary: UltraJSON (aka ujson) through 5.1.0 has a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode). Exploitation can, for example, use a […]
🟡 Medium ⏱ 10–30 min Last verified: 4 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-42482 CVE-2026-42483 CVE-2026-42484 Upstream summary: A stack-based buffer overflow in mangle_to_hex_lower() and mangle_to_hex_upper() in src/rp_cpu.c in hashcat v7.1.2 allows an attacker to cause a denial of service or […]
🟢 Low ⏱ 5–15 min Last verified: 4 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-40347 CVE-2026-44742 Upstream summary: An issue was discovered in views/list.py in GNU Mailman Postorius before 1.3.5. An attacker (logged into any account) can send a crafted POST request […]
🟡 Medium ⏱ 10–30 min Last verified: 3 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-18077 CVE-2025-5889 CVE-2026-25547 CVE-2026-33750 Upstream summary: index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service (ReDoS) attacks, as demonstrated by an expand argument containing […]
🟡 Medium ⏱ 10–30 min Last verified: 3 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-10518 CVE-2016-10542 CVE-2021-32640 CVE-2024-37890 CVE-2026-45736 Upstream summary: A vulnerability was found in the ping functionality of the ws module before 1.0.0 which allowed clients to allocate memory by […]
🟡 Medium ⏱ 10–30 min Last verified: 3 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-3885 CVE-2015-8366 CVE-2026-24808 Upstream summary: Integer overflow in the ljpeg_start function in dcraw 7.00 and earlier allows remote attackers to cause a denial of service (crash) via a […]
🟢 Low ⏱ 5–15 min Last verified: 3 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-35406 Upstream summary: Aardvark-dns is an authoritative dns server for A/AAAA container records. From 1.16.0 to 1.17.0, a truncated TCP DNS query followed by a connection reset causes […]
🟢 Low ⏱ 5–15 min Last verified: 3 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-62672 Upstream summary: rplay through 3.3.2 allows attackers to cause a denial of service (SIGSEGV and daemon crash) or possibly have unspecified other impact. This occurs in memcpy […]
🟡 Medium ⏱ 10–30 min Last verified: 2 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-42821 CVE-2024-44337 CVE-2026-40890 Upstream summary: The package `github.com/gomarkdown/markdown` is a Go library for parsing Markdown text and rendering as HTML. Prior to pseudoversion `0.0.0-20230922105210-14b16010c2ee`, which corresponds with commit […]
🟢 Low ⏱ 5–15 min Last verified: 2 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-15537 CVE-2025-15564 Upstream summary: A security vulnerability has been detected in Mapnik up to 4.2.0. This issue affects the function mapnik::dbf_file::string_value of the file plugins/input/shape/dbfile.cpp. Such manipulation leads […]
