🟠 High ⏱ 15–60 min Last verified: 19 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-7285 CVE-2016-3674 CVE-2017-7957 CVE-2019-10173 CVE-2020-26217 CVE-2020-26258 CVE-2020-26259 CVE-2021-21341 +12 more Upstream summary: Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been […]
🟢 Low ⏱ 5–15 min Last verified: 19 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-4956 CVE-2009-4664 Upstream summary: fwb_install in fwbuilder 2.1.19 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ssh-agent.##### temporary file. Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 19 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-69194 CVE-2025-69195 CVE-2026-1858 Upstream summary: A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metalink […]
🟢 Low ⏱ 5–15 min Last verified: 19 May 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-8945 Upstream summary: The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This […]
🟡 Medium ⏱ 10–30 min Last verified: 19 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-8252 CVE-2021-22918 CVE-2024-24806 Upstream summary: The implementation of realpath in libuv < 10.22.1, < 12.18.4, and < 14.9.0 used within Node.js incorrectly determined the buffer size which can […]
🟠 High ⏱ 15–60 min Last verified: 19 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-19919 CVE-2019-20920 CVE-2021-23369 CVE-2021-23383 CVE-2026-33916 CVE-2026-33937 CVE-2026-33938 CVE-2026-33939 +2 more Upstream summary: Versions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. […]
🟢 Low ⏱ 5–15 min Last verified: 18 May 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-8746 Upstream summary: A vulnerability, which was classified as problematic, was found in GNU libopts up to 27.6. Affected is the function __strstr_sse2. The manipulation leads to memory corruption. […]
🟢 Low ⏱ 5–15 min Last verified: 18 May 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-1002200 Upstream summary: plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that […]
🟢 Low ⏱ 5–15 min Last verified: 18 May 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-3727 Upstream summary: A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource […]
🟢 Low ⏱ 5–15 min Last verified: 18 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-0157 Upstream summary: The confirm add-on in SmartList 3.15 and earlier allows attackers to subscribe arbitrary e-mail addresses by using a valid cookie that specifies an address other […]
