Debian

🟢 Low   ⏱ 5–15 min  Last verified: 20 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-1753 Upstream summary: Coccinelle 0.1.7 allows local users to overwrite arbitrary files via a symlink attack on an unspecified "result file." Table of contents Symptom & Impact Environment […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-14938 CVE-2018-18409 CVE-2026-25061 Upstream summary: An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the function handle_prism during caplen processing. If […]

🟠 High   ⏱ 15–60 min  Last verified: 20 January 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-23614 CVE-2022-39261 CVE-2024-45411 CVE-2024-51754 CVE-2024-51755 CVE-2025-24374 CVE-2026-24425 CVE-2026-46627  +7 more Upstream summary: Twig is an open source template language for PHP. When in a sandbox mode, the `arrow` […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 January 2026 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-9893 Upstream summary: libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might able to lead to bypassing […]

🟠 High   ⏱ 15–60 min  Last verified: 20 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-20107 CVE-2019-20907 CVE-2020-10735 CVE-2020-26116 CVE-2020-27619 CVE-2021-23336 CVE-2021-28861 CVE-2021-29921  +12 more Upstream summary: In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-7258 CVE-2025-2713 Upstream summary: A denial of service exists in Gvisor Sandbox where a bug in reference counting code in mount point tracking could lead to a panic, […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 January 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-40983 CVE-2022-43591 CVE-2025-12385 Upstream summary: An integer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2. A specially-crafted javascript code can trigger an […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-12779 CVE-2023-39976 Upstream summary: libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames (under /dev/shm and /tmp) without […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 January 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-65430 CVE-2025-65431 CVE-2026-27982 Upstream summary: An issue was discovered in allauth-django before 65.13.0. IdP: marking a user as is_active=False after having handed tokens for that user while the […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 January 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-10164 CVE-2022-44617 CVE-2022-46285 CVE-2022-4883 CVE-2023-43788 CVE-2023-43789 CVE-2026-4367 Upstream summary: Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow […]