Debian 13 Trixie

🟠 High   ⏱ 15–60 min  Last verified: 19 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-1000002 CVE-2018-10920 CVE-2018-1110 CVE-2019-10190 CVE-2019-10191 CVE-2019-19331 CVE-2020-12667 CVE-2021-40083  +6 more Upstream summary: Improper input validation bugs in DNSSEC validators components in Knot Resolver (prior version 1.5.2) allow attacker […]

🟠 High   ⏱ 15–60 min  Last verified: 19 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-23418 CVE-2026-30928 CVE-2026-32596 CVE-2026-32608 CVE-2026-32609 CVE-2026-32610 CVE-2026-32611 CVE-2026-32632  +7 more Upstream summary: The package glances before 3.2.1 are vulnerable to XML External Entity (XXE) Injection via the use […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-9121 CVE-2016-9122 CVE-2016-9123 CVE-2026-34986 Upstream summary: go-jose before 1.0.4 suffers from an invalid curve attack for the ECDH-ES algorithm. When deriving a shared key using ECDH-ES for an […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-9514 CVE-2023-26964 Upstream summary: Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 July 2026 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-11149 Upstream summary: This affects all versions of the package node-static; all versions of the package @nubosoftware/node-static. The package fails to catch an exception when user input includes null […]

🟠 High   ⏱ 15–60 min  Last verified: 19 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-9527 CVE-2018-10191 CVE-2018-10199 CVE-2018-11743 CVE-2018-12248 CVE-2018-12249 CVE-2018-14337 CVE-2020-15866  +12 more Upstream summary: The mark_context_stack function in gc.c in mruby through 1.2.0 allows attackers to cause a denial of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2001-0775 CVE-2005-0638 CVE-2005-0639 CVE-2005-3178 Upstream summary: Buffer overflow in xloadimage 4.1 (aka xli 1.16 and 1.17) in Linux allows remote attackers to execute arbitrary code via a FACES […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-10164 CVE-2022-44617 CVE-2022-46285 CVE-2022-4883 CVE-2023-43788 CVE-2023-43789 CVE-2026-4367 Upstream summary: Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-0248 CVE-2013-2186 CVE-2014-0050 CVE-2016-1000031 CVE-2016-3092 CVE-2023-24998 CVE-2025-48976 Upstream summary: The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploaded files, […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2008-3429 Upstream summary: Buffer overflow in URI processing in HTTrack and WinHTTrack before 3.42-3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary […]