🟡 Medium ⏱ 10–30 min Last verified: 28 February 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-4056 CVE-2018-4058 CVE-2018-4059 CVE-2020-26262 CVE-2020-4067 CVE-2020-6061 CVE-2020-6062 CVE-2026-27624 +1 more Upstream summary: An exploitable SQL injection vulnerability exists in the administrator web portal function of coTURN prior to […]
🟢 Low ⏱ 5–15 min Last verified: 28 February 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-7339 Upstream summary: on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions `<1.1.0` may result in response headers being […]
🟠 High ⏱ 15–60 min Last verified: 28 February 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-0131 CVE-2024-0147 CVE-2024-0150 CVE-2024-53869 CVE-2025-23244 CVE-2025-23279 CVE-2025-23280 CVE-2025-23282 +6 more Upstream summary: NVIDIA GPU kernel driver for Windows and Linux contains a vulnerability where a potential user-mode attacker […]
🟡 Medium ⏱ 10–30 min Last verified: 27 February 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-29159 CVE-2023-30798 CVE-2024-47874 CVE-2025-54121 CVE-2026-48710 Upstream summary: Directory traversal vulnerability in Starlette versions 0.13.5 and later and prior to 0.27.0 allows a remote unauthenticated attacker to view files […]
🟢 Low ⏱ 5–15 min Last verified: 27 February 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-3010 Upstream summary: A vulnerability, which was classified as problematic, has been found in Khronos Group glslang 15.1.0. Affected by this issue is the function glslang::TIntermediate::isConversionAllowed of the […]
🟡 Medium ⏱ 10–30 min Last verified: 26 February 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-9121 CVE-2016-9122 CVE-2016-9123 CVE-2026-34986 Upstream summary: go-jose before 1.0.4 suffers from an invalid curve attack for the ECDH-ES algorithm. When deriving a shared key using ECDH-ES for an […]
🟡 Medium ⏱ 10–30 min Last verified: 26 February 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-41727 CVE-2023-29407 CVE-2023-29408 CVE-2024-24792 CVE-2026-33809 CVE-2026-33812 CVE-2026-33813 Upstream summary: An attacker can craft a malformed TIFF image which will consume a significant amount of memory when passed to […]
🟡 Medium ⏱ 10–30 min Last verified: 26 February 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-38511 CVE-2026-33055 CVE-2026-33056 Upstream summary: An issue was discovered in the tar crate before 0.4.36 for Rust. When symlinks are present in a TAR archive, extraction can create […]
🟢 Low ⏱ 5–15 min Last verified: 26 February 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-11677 CVE-2025-11678 Upstream summary: Use After Free in WebSocket server implementation in lws_handshake_server in warmcat libwebsockets may allow an attacker, in specific configurations where the user provides a […]
🟡 Medium ⏱ 10–30 min Last verified: 24 February 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-21263 CVE-2021-43617 CVE-2021-43808 CVE-2024-52301 CVE-2025-27515 Upstream summary: Laravel is a web application framework. Versions of Laravel before 6.20.11, 7.30.2 and 8.22.1 contain a query binding exploitation. This same […]
