Debian

🟢 Low   ⏱ 5–15 min  Last verified: 23 February 2026 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-32837 Upstream summary: mechanize, a library for automatically interacting with HTTP web servers, contains a regular expression that is vulnerable to regular expression denial of service (ReDoS) prior to […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 February 2026 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-31804 Upstream summary: LeoCAD before 21.03 sometimes allows a use-after-free during the opening of a new document. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 February 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-50658 CVE-2025-63811 Upstream summary: The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2012-0844 CVE-2014-3566 CVE-2015-7505 CVE-2015-7506 CVE-2015-7507 CVE-2015-7508 CVE-2024-51317 CVE-2025-29699  +1 more Upstream summary: Information-disclosure vulnerability in Netsurf through 2.8 due to a world-readable cookie jar. Table of contents Symptom […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 February 2026 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2026-40170 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2024-53859 CVE-2025-48938 Upstream summary: go-gh is a Go module for interacting with the `gh` utility and the GitHub API from the command line. A security vulnerability has been […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2024-22368 CVE-2024-23525 Upstream summary: The Spreadsheet::ParseXLSX package before 0.28 for Perl can encounter an out-of-memory condition during parsing of a crafted XLSX document. This occurs because the memoize […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 February 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-26284 CVE-2026-35166 CVE-2026-44301 Upstream summary: Hugo is a fast and Flexible Static Site Generator built in Go. Hugo depends on Go's `os/exec` for certain features, e.g. for rendering […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 February 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-5929 CVE-2021-42550 CVE-2023-6378 CVE-2024-12798 CVE-2024-12801 CVE-2026-1225 Upstream summary: QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components. Table of contents Symptom & Impact […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-1800 Upstream summary: The crack gem 0.3.1 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks […]