Debian

🟢 Low   ⏱ 5–15 min  Last verified: 16 November 2025 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-53161 Upstream summary: The buffered-reader crate before 1.1.5 for Rust allows out-of-bounds array access and a panic. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]

🟠 High   ⏱ 15–60 min  Last verified: 16 November 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2024-3660 CVE-2024-55459 CVE-2025-12058 CVE-2025-12060 CVE-2025-12638 CVE-2025-49655 CVE-2025-9905 CVE-2025-9906  +3 more Upstream summary: A arbitrary code injection vulnerability in TensorFlow's Keras framework (<2.13) allows attackers to execute arbitrary code […]

🟠 High   ⏱ 15–60 min  Last verified: 16 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-21330 CVE-2023-37276 CVE-2023-47627 CVE-2023-47641 CVE-2023-49081 CVE-2023-49082 CVE-2024-23334 CVE-2024-23829  +12 more Upstream summary: aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In aiohttp before version 3.7.4 […]

🟢 Low   ⏱ 5–15 min  Last verified: 16 November 2025 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-36243 Upstream summary: FLVMeta v1.2.1 was discovered to contain a buffer overflow via the xml_on_metadata_tag_only function at dump_xml.c. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

🟡 Medium   ⏱ 10–30 min  Last verified: 16 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-7943 CVE-2021-27019 CVE-2021-27021 Upstream summary: Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints. For PuppetDB this may contain things like hostnames. […]

🟢 Low   ⏱ 5–15 min  Last verified: 16 November 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-11687 Upstream summary: A flaw was found in the gi-docgen. This vulnerability allows arbitrary JavaScript execution in the context of the page — enabling DOM access, session cookie […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 November 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-27638 CVE-2025-24356 Upstream summary: receive.c in fastd before v21 allows denial of service (assertion failure) when receiving packets with an invalid type code. Table of contents Symptom & […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 November 2025 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-54956 Upstream summary: The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request. Table […]

🟡 Medium   ⏱ 10–30 min  Last verified: 15 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-18397 CVE-2022-25308 CVE-2022-25309 CVE-2022-25310 Upstream summary: A buffer overflow in the fribidi_get_par_embedding_levels_ex() function in lib/fribidi-bidi.c of GNU FriBidi through 1.0.7 allows an attacker to cause a denial of […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 November 2025 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-16042 Upstream summary: Growl adds growl notification support to nodejs. Growl before 1.10.2 does not properly sanitize input before passing it to exec, allowing for arbitrary command execution. Table […]