🟡 Medium ⏱ 10–30 min Last verified: 12 February 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-31981 CVE-2023-31982 CVE-2023-36192 CVE-2024-3119 CVE-2024-3120 CVE-2024-35434 Upstream summary: Sngrep v1.6.0 was discovered to contain a stack buffer overflow via the function packet_set_payload at /src/packet.c. Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 11 February 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-4303 CVE-2023-38403 CVE-2023-7250 CVE-2024-26306 CVE-2024-53580 CVE-2025-54349 CVE-2025-54350 Upstream summary: The parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a […]
🟢 Low ⏱ 5–15 min Last verified: 10 February 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-65637 Upstream summary: A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters. Due to limitations in the […]
🟢 Low ⏱ 5–15 min Last verified: 10 February 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-22376 Upstream summary: In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in rand() function, which is […]
🟢 Low ⏱ 5–15 min Last verified: 10 February 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-29510 CVE-2024-3772 Upstream summary: Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either `'infinity'`, `'inf'` or `float('inf')` (or their negatives) […]
🟢 Low ⏱ 5–15 min Last verified: 9 February 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-48945 Upstream summary: pycares is a Python module which provides an interface to c-ares. c-ares is a C library that performs DNS requests and name resolutions asynchronously. Prior […]
🟢 Low ⏱ 5–15 min Last verified: 7 February 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-9375 Upstream summary: XML Injection vulnerability in xmltodict allows Input Data Manipulation. This issue affects xmltodict: from 0.14.2 before 0.15.1. NOTE: the scope of this CVE is disputed […]
🟢 Low ⏱ 5–15 min Last verified: 6 February 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-37298 Upstream summary: gorilla/schema converts structs to and from form values. Prior to version 1.4.1 Running `schema.Decoder.Decode()` on a struct that has a field of type `[]struct{…}` opens […]
🟠 High ⏱ 15–60 min Last verified: 6 February 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-10696 CVE-2021-3602 CVE-2022-27651 CVE-2022-2990 CVE-2022-4122 CVE-2022-4123 CVE-2024-11218 CVE-2024-1753 +2 more Upstream summary: A path traversal flaw was found in Buildah in versions before 1.14.5. This flaw allows an […]
🟢 Low ⏱ 5–15 min Last verified: 6 February 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-54869 Upstream summary: FPDI is a collection of PHP classes that facilitate reading pages from existing PDF documents and using them as templates in FPDF. In versions 2.6.2 […]
