🟢 Low ⏱ 5–15 min Last verified: 21 July 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-42254 Upstream summary: Hickory DNS hickory-recursor 0.1 through 0.25.2 allows cross-zone poisoning because cached data is not directly associated with a query that triggered a response. Table of contents […]
🟢 Low ⏱ 5–15 min Last verified: 21 July 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-45765 Upstream summary: ruby-jwt v3.0.0.beta1 was discovered to contain weak encryption. NOTE: the Supplier's perspective is "keysize is not something that is enforced by this library. Currently more recent […]
🟢 Low ⏱ 5–15 min Last verified: 21 July 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-23050 Upstream summary: QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero). This is fixed in 5.15.19, 6.5.9, and […]
🟢 Low ⏱ 5–15 min Last verified: 21 July 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-6318 Upstream summary: Stack-based buffer overflow in the FascistGecosUser function in lib/fascist.c in cracklib allows local users to cause a denial of service (application crash) or gain privileges via […]
🟠 High ⏱ 15–60 min Last verified: 21 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-10742 CVE-2020-28168 CVE-2021-3749 CVE-2023-45857 CVE-2024-39338 CVE-2024-57965 CVE-2025-27152 CVE-2025-58754 +12 more Upstream summary: Axios up to and including 0.18.0 allows attackers to cause a denial of service (application crash) […]
🟢 Low ⏱ 5–15 min Last verified: 21 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-9244 CVE-2019-14939 Upstream summary: Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with `mysql.escape()` which could lead to SQL Injection. Table of contents […]
🟢 Low ⏱ 5–15 min Last verified: 21 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-3862 CVE-2006-0950 Upstream summary: Buffer overflow in unalz before 0.53 allows remote attackers to execute arbitrary code via long file names in ALZ archives. Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 21 July 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-28923 CVE-2026-27585 CVE-2026-27586 CVE-2026-27587 CVE-2026-27588 CVE-2026-27589 CVE-2026-27590 Upstream summary: Caddy v2.4.6 was discovered to contain an open redirection vulnerability which allows attackers to redirect users to phishing websites […]
🟢 Low ⏱ 5–15 min Last verified: 21 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-2159 CVE-2004-2160 Upstream summary: Multiple buffer overflows in XMLStarlet Command Line XML Toolkit 0.9.3 have unknown impact and attack vectors via (1) xml_elem.c and (2) xml_select.c. Table of […]
🟠 High ⏱ 15–60 min Last verified: 21 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-1000215 CVE-2019-1010239 CVE-2019-11834 CVE-2019-11835 CVE-2023-26819 CVE-2023-50471 CVE-2023-50472 CVE-2023-53154 +2 more Upstream summary: Dave Gamble cJSON version 1.7.6 and earlier contains a CWE-772 vulnerability in cJSON library that can […]
