Debian

🟢 Low   ⏱ 5–15 min  Last verified: 10 May 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2026-33186 Upstream summary: gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` […]

🟢 Low   ⏱ 5–15 min  Last verified: 10 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0381 CVE-2005-3342 Upstream summary: Multiple vulnerabilities in noweb 2.9 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files via multiple vectors including the […]

🟡 Medium   ⏱ 10–30 min  Last verified: 10 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0536 CVE-2005-0869 CVE-2005-0870 CVE-2005-3347 CVE-2005-3348 CVE-2006-3360 CVE-2007-4048 CVE-2023-49006 Upstream summary: Directory traversal vulnerability in phpSysInfo 2.1 and earlier allows attackers with write access to a local directory to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 10 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2010-4802 CVE-2010-4803 CVE-2011-1589 CVE-2011-1841 CVE-2018-25100 CVE-2020-36829 CVE-2021-47208 CVE-2024-58134  +1 more Upstream summary: Commands.pm in Mojolicious before 0.999928 does not properly perform CGI environment detection, which has unspecified impact […]

🟡 Medium   ⏱ 10–30 min  Last verified: 10 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-3257 CVE-2009-0547 CVE-2009-0582 CVE-2009-0587 CVE-2016-10727 CVE-2018-12422 CVE-2020-14928 CVE-2020-16117  +1 more Upstream summary: Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 May 2026 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2026-23949 Upstream summary: jaraco.context, an open-source software package that provides some useful decorators and context managers, has a Zip Slip path traversal vulnerability in the `jaraco.context.tarball()` function starting in […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 May 2026 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2024-27629 Upstream summary: An issue in dc2niix before v.1.0.20240202 allows a local attacker to execute arbitrary code via the generated file name is not properly escaped and injected into […]

🟡 Medium   ⏱ 10–30 min  Last verified: 9 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-36113 CVE-2022-36114 CVE-2022-46176 CVE-2023-38497 CVE-2023-40030 Upstream summary: Cargo is a package manager for the rust programming language. After a package is downloaded, Cargo extracts its source code in […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2026-34043 Upstream summary: Serialize JavaScript to a superset of JSON that includes regular expressions and functions. Prior to version 7.0.5, there is a Denial of Service (DoS) vulnerability […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-54363 CVE-2025-54364 Upstream summary: Microsoft Knack 0.12.0 allows Regular expression Denial of Service (ReDoS) in the knack.introspection module. extract_full_summary_from_signature employs an inefficient regular expression pattern: "\s(:param)\s+(.+?)\s:(.*)" that is […]