Debian

🟢 Low   ⏱ 5–15 min  Last verified: 20 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-1391 CVE-2026-3381 Upstream summary: Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS, SpamAssassin, and possibly other products, allows […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2006-6939 CVE-2008-3916 Upstream summary: GNU ed before 0.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files, possibly in the open_sbuf function. Table […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2008-4964 Upstream summary: filters/any-UTF8 in konwert 1.8 allows local users to delete arbitrary files via a symlink attack on a /tmp/any-##### temporary file. Table of contents Symptom & […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 February 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2026-25727 Upstream summary: time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-19105 CVE-2021-21897 CVE-2021-21898 CVE-2021-21899 CVE-2021-21900 CVE-2021-45341 CVE-2021-45342 CVE-2021-45343  +1 more Upstream summary: LibreCAD 2.1.3 allows remote attackers to cause a denial of service (0x89C04589 write access violation and […]

🟠 High   ⏱ 15–60 min  Last verified: 20 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2024-52530 CVE-2024-52531 CVE-2024-52532 CVE-2025-11021 CVE-2025-12105 CVE-2025-14523 CVE-2025-2784 CVE-2025-32049  +12 more Upstream summary: GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-23566 CVE-2024-55565 Upstream summary: The package nanoid from 3.0.0 and before 3.1.31 are vulnerable to Information Exposure via the valueOf() function which allows to reproduce the last id […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 February 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-0233 CVE-2015-8314 CVE-2019-5421 CVE-2026-32700 CVE-2026-40295 Upstream summary: Devise gem 2.2.x before 2.2.3, 2.1.x before 2.1.3, 2.0.x before 2.0.5, and 1.5.x before 1.5.4 for Ruby, when using certain databases, […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 February 2026 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2024-58265 Upstream summary: The snow crate before 0.9.5 for Rust, when stateful TransportState is used, allows incrementing a nonce and thereby denying message delivery. Table of contents Symptom & […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 February 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2026-3884 Upstream summary: Versions of the package spin.js before 3.0.0 are vulnerable to Cross-site Scripting (XSS) via the spin() function that allows a creation of more than 1 […]