Debian

🟢 Low   ⏱ 5–15 min  Last verified: 9 November 2025 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-69662 Upstream summary: SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the to_postgis()` function being used to write GeoDataFrames to a PostgreSQL […]

🟡 Medium   ⏱ 10–30 min  Last verified: 9 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2014-6393 CVE-2024-10491 CVE-2024-29041 CVE-2024-43796 Upstream summary: The Express web framework before 3.11 and 4.x before 4.5 for Node.js does not provide a charset field in HTTP Content-Type headers […]

🟡 Medium   ⏱ 10–30 min  Last verified: 9 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-30688 CVE-2024-11003 CVE-2024-48990 CVE-2024-48991 CVE-2024-48992 Upstream summary: needrestart 0.8 through 3.5 before 3.6 is prone to local privilege escalation. Regexes to detect the Perl, Python, and Ruby interpreters […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 November 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-54869 Upstream summary: FPDI is a collection of PHP classes that facilitate reading pages from existing PDF documents and using them as templates in FPDF. In versions 2.6.2 […]

🟡 Medium   ⏱ 10–30 min  Last verified: 9 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-5093 CVE-2013-5942 CVE-2013-5943 CVE-2017-18638 CVE-2022-4728 CVE-2022-4729 CVE-2022-4730 Upstream summary: The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which […]

🟠 High   ⏱ 15–60 min  Last verified: 9 November 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2012-2374 CVE-2013-2099 CVE-2014-9720 CVE-2023-28370 CVE-2024-52804 CVE-2025-47287 CVE-2025-67724 CVE-2025-67725  +3 more Upstream summary: CRLF injection vulnerability in the tornado.web.RequestHandler.set_header function in Tornado before 2.2.1 allows remote attackers to inject […]

🟡 Medium   ⏱ 10–30 min  Last verified: 9 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-2125 CVE-2015-7687 CVE-2020-35679 CVE-2020-35680 CVE-2020-7247 CVE-2020-8793 CVE-2020-8794 CVE-2023-29323  +1 more Upstream summary: OpenSMTPD before 5.3.2 does not properly handle SSL sessions, which allows remote attackers to cause a […]

🟢 Low   ⏱ 5–15 min  Last verified: 8 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2024-53856 CVE-2024-53857 Upstream summary: rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows an attacker to trigger rpgp crashes by providing crafted data. This […]

🟢 Low   ⏱ 5–15 min  Last verified: 8 November 2025 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-9181 Upstream summary: perl-Image-Info: When parsing an SVG file, external entity expansion (XXE) was not disabled. An attacker could craft an SVG file which, when processed by an application […]