🟠 High ⏱ 15–60 min Last verified: 29 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-10696 CVE-2021-3602 CVE-2022-27651 CVE-2022-2990 CVE-2022-4122 CVE-2022-4123 CVE-2024-11218 CVE-2024-1753 +2 more Upstream summary: A path traversal flaw was found in Buildah in versions before 1.14.5. This flaw allows an […]
🟢 Low ⏱ 5–15 min Last verified: 28 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-32725 CVE-2026-32726 Upstream summary: SciTokens C++ is a minimal library for creating and using SciTokens from C or C++. Prior to version 1.4.1, scitokens-cpp is vulnerable to an […]
🟢 Low ⏱ 5–15 min Last verified: 28 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-31972 CVE-2026-31973 Upstream summary: SAMtools is a program for reading, manipulating and writing bioinformatics file formats. The `mpileup` command outputs DNA sequences that have been aligned against a […]
🟢 Low ⏱ 5–15 min Last verified: 28 January 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-32286 Upstream summary: The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised PostgreSQL server can send a DataRow message with a negative field length, causing […]
🟢 Low ⏱ 5–15 min Last verified: 28 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-40347 CVE-2026-44742 Upstream summary: An issue was discovered in views/list.py in GNU Mailman Postorius before 1.3.5. An attacker (logged into any account) can send a crafted POST request […]
🟢 Low ⏱ 5–15 min Last verified: 28 January 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-3757 Upstream summary: Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification. Table of contents Symptom & […]
🟡 Medium ⏱ 10–30 min Last verified: 28 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-17042 CVE-2019-1020001 CVE-2024-27285 CVE-2026-41493 Upstream summary: lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attackers to […]
🟢 Low ⏱ 5–15 min Last verified: 28 January 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-36039 Upstream summary: PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 28 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-6876 CVE-2014-1226 Upstream summary: The (1) pty_init_terminal and (2) pipe_init_terminal functions in main.c in s3dvt 0.2.2 and earlier allows local users to gain privileges by leveraging setuid permissions […]
🟢 Low ⏱ 5–15 min Last verified: 28 January 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-34095 Upstream summary: cpdb-libs provides frontend and backend libraries for the Common Printing Dialog Backends (CPDB) project. In versions 1.0 through 2.0b4, cpdb-libs is vulnerable to buffer overflows via […]
