🟠 High ⏱ 15–60 min Last verified: 8 December 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-10742 CVE-2020-28168 CVE-2021-3749 CVE-2023-45857 CVE-2024-57965 CVE-2025-27152 CVE-2025-58754 CVE-2025-62718 +12 more Upstream summary: Axios up to and including 0.18.0 allows attackers to cause a denial of service (application crash) […]
🟡 Medium ⏱ 10–30 min Last verified: 7 December 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3300 CVE-2009-3474 CVE-2009-3475 CVE-2009-3476 CVE-2019-19191 CVE-2021-28963 CVE-2021-31826 CVE-2025-9943 Upstream summary: Multiple cross-site scripting (XSS) vulnerabilities in the Identity Provider (IdP) 1.3.x before 1.3.4 and 2.x before 2.1.5, and […]
🟡 Medium ⏱ 10–30 min Last verified: 6 December 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-2851 CVE-2007-0472 CVE-2007-0473 CVE-2007-0474 CVE-2007-0475 CVE-2014-2581 CVE-2017-8849 CVE-2025-66002 +1 more Upstream summary: smb4k 0.4 and other versions before 0.6.3 allows local users to read sensitive files via a […]
🟢 Low ⏱ 5–15 min Last verified: 6 December 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-68463 Upstream summary: Bio.Entrez in Biopython through 186 allows doctype XXE. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution […]
🟡 Medium ⏱ 10–30 min Last verified: 30 November 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-20108 CVE-2016-5697 CVE-2017-11428 CVE-2024-45409 CVE-2025-25291 CVE-2025-25292 CVE-2025-25293 CVE-2025-54572 Upstream summary: xml_security.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements […]
🟡 Medium ⏱ 10–30 min Last verified: 30 November 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-25050 CVE-2022-25051 CVE-2022-27419 CVE-2025-34450 Upstream summary: rtl_433 21.12 was discovered to contain a stack overflow in the function somfy_iohc_decode(). This vulnerability allows attackers to cause a Denial of […]
🟢 Low ⏱ 5–15 min Last verified: 27 November 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-62611 Upstream summary: aiomysql is a library for accessing a MySQL database from the asyncio. Prior to version 0.3.0, the client-side settings are not checked before sending local […]
🟢 Low ⏱ 5–15 min Last verified: 24 November 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-22145 Upstream summary: Carbon is an international PHP extension for DateTime. Application passing unsanitized user input to Carbon::setLocale are at risk of arbitrary file include, if the application […]
🟡 Medium ⏱ 10–30 min Last verified: 20 November 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-14227 CVE-2018-16790 CVE-2023-0437 CVE-2024-6381 CVE-2024-6383 CVE-2025-0755 CVE-2025-40906 Upstream summary: In MongoDB libbson 1.7.0, the bson_iter_codewscope function in bson-iter.c miscalculates a bson_utf8_validate length argument, which allows remote attackers to […]
🟢 Low ⏱ 5–15 min Last verified: 20 November 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-59432 Upstream summary: SCRAM (Salted Challenge Response Authentication Mechanism) is part of the family of Simple Authentication and Security Layer (SASL, RFC 4422) authentication mechanisms. Prior to version […]
