Debian

🟢 Low   ⏱ 5–15 min  Last verified: 2 October 2025 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-27476 Upstream summary: OWSLib is a Python package for client programming with Open Geospatial Consortium (OGC) web service interface standards, and their related content models. OWSLib's XML parser (which […]

🟡 Medium   ⏱ 10–30 min  Last verified: 2 October 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-32898 CVE-2025-32900 CVE-2025-66270 Upstream summary: The KDE Connect verification-code protocol before 2025-04-18 uses only 8 characters and therefore allows brute-force attacks. This affects KDE Connect before 1.33.0 on […]

🟡 Medium   ⏱ 10–30 min  Last verified: 2 October 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-10069 CVE-2021-26825 CVE-2021-26826 Upstream summary: In Godot through 3.1, remote code execution is possible due to the deserialization policy not being applied correctly. Table of contents Symptom & […]

🟠 High   ⏱ 15–60 min  Last verified: 1 October 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-26232 CVE-2020-26275 CVE-2022-24757 CVE-2022-29241 CVE-2023-39968 CVE-2023-40170 CVE-2023-49080 CVE-2025-61669  +3 more Upstream summary: Jupyter Server before version 1.0.6 has an Open redirect vulnerability. A maliciously crafted link to a […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 October 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2024-29421 CVE-2025-2581 Upstream summary: xmedcon 0.23.0 and fixed in v.0.24.0 is vulnerable to Buffer Overflow via libs/dicom/basic.c which allows an attacker to execute arbitrary code. Table of contents […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 October 2025 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-61765 Upstream summary: python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 October 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-4076 CVE-2023-1672 Upstream summary: A flaw exists in tang, a network-based cryptographic binding server, which could result in leak of private keys. Table of contents Symptom & Impact […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 October 2025 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-32637 Upstream summary: GBrowse accepts files with any formats uploaded and places them in the area accessible through unauthenticated web requests. Therefore, anyone who can upload files through the […]