🟢 Low ⏱ 5–15 min Last verified: 2 June 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-27088 Upstream summary: es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into `function#copy` or `function#toStringTokens` may cause the script to stall. […]
🟠 High ⏱ 15–60 min Last verified: 2 June 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-1629 CVE-2013-5123 CVE-2014-8991 CVE-2019-20916 CVE-2021-3572 CVE-2023-5752 CVE-2025-8869 CVE-2026-1703 +2 more Upstream summary: pip before 1.3 uses HTTP to retrieve packages from the PyPI repository, and does not perform […]
🟠 High ⏱ 15–60 min Last verified: 2 June 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-4575 CVE-2015-4054 CVE-2015-6817 CVE-2021-3935 CVE-2025-12819 CVE-2025-2291 CVE-2026-6664 CVE-2026-6665 +2 more Upstream summary: The add_database function in objects.c in the pgbouncer pooler 1.5.2 for PostgreSQL allows remote attackers to […]
🟡 Medium ⏱ 10–30 min Last verified: 2 June 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-19869 CVE-2021-28025 CVE-2021-3481 CVE-2021-45930 CVE-2023-32573 CVE-2025-10729 CVE-2026-6210 Upstream summary: An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp. Table […]
🟡 Medium ⏱ 10–30 min Last verified: 2 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-16468 CVE-2018-8048 CVE-2019-15587 CVE-2022-23514 CVE-2022-23515 CVE-2022-23516 Upstream summary: In the Loofah gem for Ruby, through v2.2.2, unsanitized JavaScript may occur in sanitized output when a crafted SVG element […]
🟡 Medium ⏱ 10–30 min Last verified: 2 June 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-15795 CVE-2019-15796 CVE-2020-27351 CVE-2025-6966 Upstream summary: python-apt only checks the MD5 sums of downloaded files in `Version.fetch_binary()` and `Version.fetch_source()` of apt/package.py in version 1.9.0ubuntu1 and earlier. This allows […]
🟡 Medium ⏱ 10–30 min Last verified: 2 June 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-11187 CVE-2022-36179 CVE-2022-36180 CVE-2025-32807 Upstream summary: Incorrect Access Control in the LDAP class of GONICUS GOsa through 2019-04-11 allows an attacker to log into any account with a […]
🟡 Medium ⏱ 10–30 min Last verified: 2 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-8729 CVE-2016-9601 CVE-2017-7885 CVE-2017-7975 CVE-2017-7976 CVE-2017-9216 CVE-2020-12268 CVE-2023-46361 Upstream summary: An exploitable memory corruption vulnerability exists in the JBIG2 parser of Artifex MuPDF 1.9. A specially crafted PDF […]
🟡 Medium ⏱ 10–30 min Last verified: 2 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-0720 CVE-2016-0721 CVE-2017-2661 CVE-2018-1079 CVE-2018-1086 CVE-2022-1049 CVE-2022-2735 Upstream summary: Cross-site request forgery (CSRF) vulnerability in pcsd web UI in pcs before 0.9.149. Table of contents Symptom & Impact […]
🟢 Low ⏱ 5–15 min Last verified: 1 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-49128 CVE-2025-52999 Upstream summary: Jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor. Starting in version 2.0.0 and prior to version 2.13.0, […]
