🟡 Medium ⏱ 10–30 min Last verified: 21 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-16165 CVE-2019-16166 CVE-2020-23856 CVE-2023-2789 CVE-2025-8735 CVE-2025-8736 Upstream summary: GNU cflow through 1.6 has a use-after-free in the reference function in parser.c. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 21 May 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-38173 Upstream summary: Btrbk before 0.31.2 allows command execution because of the mishandling of remote hosts filtering SSH commands using ssh_filter_btrbk.sh in authorized_keys. Table of contents Symptom & Impact […]
🟡 Medium ⏱ 10–30 min Last verified: 21 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-36049 CVE-2023-32695 CVE-2026-33151 Upstream summary: socket.io-parser before 3.4.1 allows attackers to cause a denial of service (memory consumption) via a large packet because a concatenation approach is used. […]
🟠 High ⏱ 15–60 min Last verified: 21 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-6160 CVE-2017-14266 CVE-2018-13112 CVE-2018-17580 CVE-2018-17582 CVE-2018-17974 CVE-2018-18407 CVE-2018-18408 +12 more Upstream summary: tcprewrite in tcpreplay before 4.1.2 allows remote attackers to cause a denial of service (segmentation fault) […]
🟠 High ⏱ 15–60 min Last verified: 21 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-45948 CVE-2022-38528 CVE-2022-45748 CVE-2024-40724 CVE-2024-45679 CVE-2024-46632 CVE-2024-48423 CVE-2024-48424 +12 more Upstream summary: Open Asset Import Library (aka assimp) 5.1.0 and 5.1.1 has a heap-based buffer overflow in _m3d_safestr […]
🟢 Low ⏱ 5–15 min Last verified: 20 May 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-13574 Upstream summary: In lib/mini_magick/image.rb in MiniMagick before 4.9.4, a fetched remote image filename could cause remote command execution because Image.open input is directly passed to Kernel#open, which accepts […]
🟢 Low ⏱ 5–15 min Last verified: 20 May 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-67125 Upstream summary: A signed integer overflow in docopt.cpp v0.6.2 (LeafPattern::match in docopt_private.h) when merging occurrence counters (e.g., default LONG_MAX + first user "-v/–verbose") can cause counter wrap (negative/unbounded […]
🟢 Low ⏱ 5–15 min Last verified: 20 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-7598 CVE-2021-44906 Upstream summary: minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "__proto__" payload. Table of contents Symptom & […]
🟠 High ⏱ 15–60 min Last verified: 20 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-1001 CVE-2005-4890 CVE-2006-1174 CVE-2006-1376 CVE-2006-1844 CVE-2006-3378 CVE-2007-5686 CVE-2008-5394 +11 more Upstream summary: Unknown vulnerability in the passwd_check function in Shadow 4.0.4.1, and possibly other versions before 4.0.5, allows […]
🟡 Medium ⏱ 10–30 min Last verified: 20 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-1772 CVE-2004-1773 CVE-2005-0990 CVE-2018-1000097 Upstream summary: Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line […]
