🟡 Medium ⏱ 10–30 min Last verified: 18 June 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-46734 CVE-2026-30838 CVE-2026-33347 Upstream summary: league/commonmark is a PHP Markdown parser. A cross-site scripting (XSS) vulnerability in the Attributes extension of the league/commonmark library (versions 1.5.0 through 2.6.x) […]
🟠 High ⏱ 15–60 min Last verified: 18 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2001-1494 CVE-2005-2876 CVE-2006-7108 CVE-2007-5191 CVE-2008-1926 CVE-2011-1675 CVE-2011-1677 CVE-2013-0157 +12 more Upstream summary: script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by […]
🟢 Low ⏱ 5–15 min Last verified: 18 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-10073 Upstream summary: The create_response function in server/server.c in Psensor before 1.1.4 allows Directory Traversal because it lacks a check for whether a file is under the webserver […]
🟢 Low ⏱ 5–15 min Last verified: 18 June 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-68146 CVE-2026-22701 Upstream summary: filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check-Time-of-Use (TOCTOU) race condition allows local attackers to corrupt or […]
🟡 Medium ⏱ 10–30 min Last verified: 18 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-4099 CVE-2023-2602 CVE-2023-2603 CVE-2025-1390 CVE-2026-4878 Upstream summary: The capsh program in libcap before 2.22 does not change the current working directory when the –chroot option is specified, which […]
🟢 Low ⏱ 5–15 min Last verified: 18 June 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-28371 Upstream summary: In Stellarium through 1.2, attackers can write to files that are typically unintended, such as ones with absolute pathnames or .. directory traversal. Table of contents […]
🟢 Low ⏱ 5–15 min Last verified: 18 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-1774 CVE-2013-4362 Upstream summary: WEB-DAV Linux File System (davfs2) 0.2.3 does not properly enforce Unix permissions, which allows local users to write arbitrary files on a davfs2 mounted […]
🟢 Low ⏱ 5–15 min Last verified: 18 June 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-4750 Upstream summary: Out-of-bounds Read vulnerability in fabiangreffrath woof.This issue affects woof: before woof_15.3.0. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]
🟡 Medium ⏱ 10–30 min Last verified: 18 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-3583 CVE-2021-3620 CVE-2023-5115 CVE-2023-5764 CVE-2024-0690 CVE-2024-11079 CVE-2024-8775 CVE-2024-9902 Upstream summary: A flaw was found in Ansible, where a user's controller is vulnerable to template injection. This issue can […]
🟢 Low ⏱ 5–15 min Last verified: 17 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-58367 CVE-2026-33155 Upstream summary: DeepDiff is a project focused on Deep Difference and search of any Python data. Versions 5.0.0 through 8.6.0 are vulnerable to class pollution via […]
