🟡 Medium ⏱ 10–30 min Last verified: 18 March 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-4160 CVE-2013-7455 CVE-2014-0459 CVE-2016-10165 CVE-2018-16435 CVE-2025-29070 CVE-2026-41254 Upstream summary: Little CMS (lcms2) before 2.5, as used in OpenJDK 7 and possibly other products, allows remote attackers to cause […]
🟢 Low ⏱ 5–15 min Last verified: 18 March 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-35936 CVE-2025-51591 Upstream summary: Pandoc is a Haskell library for converting from one markup format to another, and a command-line tool that uses this library. Starting in version […]
🟢 Low ⏱ 5–15 min Last verified: 16 March 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-26198 CVE-2026-27953 Upstream summary: Ormar is a async mini ORM for Python. In versions 0.9.9 through 0.22.0, when performing aggregate queries, Ormar ORM constructs SQL expressions by passing […]
🟡 Medium ⏱ 10–30 min Last verified: 16 March 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-40826 CVE-2023-40827 CVE-2023-40828 CVE-2025-70952 Upstream summary: An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the […]
🟡 Medium ⏱ 10–30 min Last verified: 15 March 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-36377 CVE-2025-70888 CVE-2026-39853 CVE-2026-39855 CVE-2026-39856 Upstream summary: Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe.sys, […]
🟡 Medium ⏱ 10–30 min Last verified: 15 March 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-1829 CVE-2014-1830 CVE-2015-2296 CVE-2018-18074 CVE-2023-32681 CVE-2024-35195 CVE-2024-47081 CVE-2026-25645 Upstream summary: Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorization header […]
🟢 Low ⏱ 5–15 min Last verified: 15 March 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-47372 CVE-2026-47373 Upstream summary: Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable […]
🟡 Medium ⏱ 10–30 min Last verified: 13 March 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-26486 CVE-2023-26487 CVE-2025-25304 CVE-2025-26619 CVE-2025-27793 CVE-2025-59840 CVE-2025-65110 CVE-2025-66648 Upstream summary: Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. The Vega […]
🟢 Low ⏱ 5–15 min Last verified: 13 March 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-68920 Upstream summary: C-Kermit (aka ckermit) through 10.0 Beta.12 (aka 416-beta12) before 244644d allows a remote Kermit system to overwrite files on the local system, or retrieve arbitrary […]
🟢 Low ⏱ 5–15 min Last verified: 13 March 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-45765 Upstream summary: ruby-jwt v3.0.0.beta1 was discovered to contain weak encryption. NOTE: the Supplier's perspective is "keysize is not something that is enforced by this library. Currently more […]
