Debian

🟡 Medium   ⏱ 10–30 min  Last verified: 22 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-28923 CVE-2026-27585 CVE-2026-27586 CVE-2026-27587 CVE-2026-27588 CVE-2026-27589 CVE-2026-27590 Upstream summary: Caddy v2.4.6 was discovered to contain an open redirection vulnerability which allows attackers to redirect users to phishing websites […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 March 2026 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-33204 Upstream summary: In the pg_partman (aka PG Partition Manager) extension before 4.5.1 for PostgreSQL, arbitrary code execution can be achieved via SECURITY DEFINER functions because an explicit search_path […]

🟠 High   ⏱ 15–60 min  Last verified: 22 March 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-26232 CVE-2020-26275 CVE-2022-24757 CVE-2022-29241 CVE-2023-39968 CVE-2023-40170 CVE-2023-49080 CVE-2025-61669  +3 more Upstream summary: Jupyter Server before version 1.0.6 has an Open redirect vulnerability. A maliciously crafted link to a […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 March 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2024-28180 CVE-2026-34986 Upstream summary: Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An attacker could send a JWE containing […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 March 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2024-42458 CVE-2026-42859 Upstream summary: server.c in Neat VNC (aka neatvnc) before 0.8.1 does not properly validate the security type, a related issue to CVE-2006-2369. Table of contents Symptom […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 March 2026 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-36658 Upstream summary: In Apache::Session::LDAP before 0.5, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the […]

🟠 High   ⏱ 15–60 min  Last verified: 21 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-18246 CVE-2018-18247 CVE-2018-18248 CVE-2018-18249 CVE-2018-18250 CVE-2020-24368 CVE-2021-32746 CVE-2021-32747  +8 more Upstream summary: Icinga Web 2 before 2.6.2 has CSRF via /icingaweb2/config/moduledisable?name=monitoring to disable the monitoring module, or via […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-29499 CVE-2022-39237 Upstream summary: SIF is an open source implementation of the Singularity Container Image Format. The `siftool new` command and func siftool.New() produce predictable UUID identifiers due […]

🟠 High   ⏱ 15–60 min  Last verified: 21 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-31150 CVE-2022-31151 CVE-2022-32210 CVE-2022-35948 CVE-2022-35949 CVE-2023-23936 CVE-2023-24807 CVE-2023-45143  +12 more Upstream summary: undici is an HTTP/1.1 client, written from scratch for Node.js. It is possible to inject CRLF […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 March 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-25860 CVE-2026-34155 Upstream summary: The install.c module in the Pengutronix RAUC update client prior to version 1.5 has a Time-of-Check Time-of-Use vulnerability, where signature verification on an update […]