🟠 High ⏱ 15–60 min Last verified: 20 January 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-23614 CVE-2022-39261 CVE-2024-45411 CVE-2024-51754 CVE-2024-51755 CVE-2025-24374 CVE-2026-24425 CVE-2026-46627 +7 more Upstream summary: Twig is an open source template language for PHP. When in a sandbox mode, the `arrow` […]
🟡 Medium ⏱ 10–30 min Last verified: 19 January 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-65430 CVE-2025-65431 CVE-2026-27982 Upstream summary: An issue was discovered in allauth-django before 65.13.0. IdP: marking a user as is_active=False after having handed tokens for that user while the […]
🟡 Medium ⏱ 10–30 min Last verified: 19 January 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-10164 CVE-2022-44617 CVE-2022-46285 CVE-2022-4883 CVE-2023-43788 CVE-2023-43789 CVE-2026-4367 Upstream summary: Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow […]
🟡 Medium ⏱ 10–30 min Last verified: 18 January 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-0155 CVE-2022-0536 CVE-2023-26159 CVE-2024-28849 CVE-2026-40895 Upstream summary: follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor Table of contents Symptom & Impact Environment & […]
🟡 Medium ⏱ 10–30 min Last verified: 18 January 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-14505 CVE-2021-39214 CVE-2022-24766 CVE-2025-23217 CVE-2026-40606 Upstream summary: mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py. Table of contents Symptom & Impact Environment & Reproduction Root […]
🟠 High ⏱ 15–60 min Last verified: 18 January 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-29946 CVE-2023-47090 CVE-2025-30215 CVE-2026-27571 CVE-2026-27889 CVE-2026-29785 CVE-2026-33215 CVE-2026-33216 +8 more Upstream summary: NATS.io NATS Server before 2.8.2 and Streaming Server before 0.24.6 could allow a remote attacker to […]
🟡 Medium ⏱ 10–30 min Last verified: 17 January 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-5846 CVE-2017-5847 CVE-2023-38103 CVE-2023-38104 CVE-2026-2920 CVE-2026-2922 Upstream summary: The gst_asf_demux_process_ext_stream_props function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer before 1.10.3 allows remote attackers to cause a denial of service […]
🟡 Medium ⏱ 10–30 min Last verified: 17 January 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-1000083 CVE-2017-1000159 CVE-2019-1010006 CVE-2019-11459 CVE-2023-51698 CVE-2023-52076 CVE-2026-46529 Upstream summary: backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via […]
🟢 Low ⏱ 5–15 min Last verified: 17 January 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-26994 Upstream summary: uTLS is a fork of crypto/tls, created to customize ClientHello for fingerprinting resistance while still using it for the handshake. In versions 1.6.7 and below, […]
🟢 Low ⏱ 5–15 min Last verified: 17 January 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-28684 Upstream summary: python-dotenv reads key-value pairs from a .env file and can set them as environment variables. Prior to version 1.2.2, `set_key()` and `unset_key()` in python-dotenv follow […]
