Debian 13 Trixie

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2014-9390 CVE-2023-4759 CVE-2025-4949 Upstream summary: Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-3253 CVE-2016-6814 CVE-2020-17521 Upstream summary: The MethodClosure class in runtime/MethodClosure.java in Apache Groovy 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code or cause a denial of […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-2753 CVE-2015-2754 CVE-2015-2776 CVE-2017-2923 CVE-2017-2924 CVE-2018-7435 CVE-2018-7436 CVE-2018-7437  +2 more Upstream summary: FreeXL before 1.0.0i allows remote attackers to cause a denial of service (stack corruption) or possibly […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-6345 CVE-2016-6346 CVE-2016-6347 CVE-2016-6348 CVE-2016-9606 CVE-2017-7561 CVE-2020-10688 CVE-2020-1695  +2 more Upstream summary: RESTEasy allows remote authenticated users to obtain sensitive information by leveraging "insufficient use of random values" […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-9284 CVE-2017-18076 CVE-2020-36599 Upstream summary: The request phase of the OmniAuth Ruby gem (1.9.1 and earlier) is vulnerable to Cross-Site Request Forgery when used as part of the […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-1624 CVE-2016-1968 CVE-2020-8927 Upstream summary: Integer underflow in the ProcessCommandsInternal function in dec/decode.c in Brotli, as used in Google Chrome before 48.0.2564.109, allows remote attackers to cause a […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-30130 CVE-2023-27560 CVE-2023-48795 CVE-2023-49316 CVE-2023-52892 CVE-2024-27354 CVE-2024-27355 CVE-2026-32935  +2 more Upstream summary: phpseclib before 2.0.31 and 3.x before 3.0.7 mishandles RSA PKCS#1 v1.5 signature verification. Table of contents […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2024-37568 CVE-2025-59420 CVE-2025-61920 CVE-2025-62706 CVE-2025-68158 CVE-2026-27962 CVE-2026-28490 CVE-2026-28498  +2 more Upstream summary: lepture Authlib before 1.3.1 has algorithm confusion with asymmetric public keys. Unless an algorithm is specified […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-1083 CVE-2003-1084 CVE-2004-1897 CVE-2004-1898 CVE-2004-1899 CVE-2016-7067 CVE-2019-11454 CVE-2019-11455  +1 more Upstream summary: Stack-based buffer overflow in Monit 1.4 to 4.1 allows remote attackers to execute arbitrary code via […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-2851 CVE-2007-0472 CVE-2007-0473 CVE-2007-0474 CVE-2007-0475 CVE-2014-2581 CVE-2017-8849 CVE-2025-66002  +1 more Upstream summary: smb4k 0.4 and other versions before 0.6.3 allows local users to read sensitive files via a […]