🟠 High ⏱ 15–60 min Last verified: 7 July 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-45801 CVE-2024-47875 CVE-2024-48910 CVE-2025-15599 CVE-2025-26791 CVE-2025-48050 CVE-2026-0540 CVE-2026-41238 +2 more Upstream summary: DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It has been […]
🟢 Low ⏱ 5–15 min Last verified: 7 July 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-36489 Upstream summary: Buffer Overflow vulnerability in Allegro through 5.2.6 allows attackers to cause a denial of service via crafted PCX/TGA/BMP files to allegro_image addon. Table of contents Symptom […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 1.6.58-r1 📖 ~4 min read • Source: Alpine secdb entry — libpng 1.6.58-r1 Related CVEs: CVE-2026-40930 CVE-2026-34757 CVE-2026-33416 CVE-2026-33636 CVE-2026-25646 CVE-2026-22695 CVE-2026-22801 CVE-2025-66293 +7 more Upstream summary: Alpine main repository for vedge ships libpng 1.6.58-r1 which […]
🟢 Low ⏱ 5–15 min Last verified: 7 July 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-68131 CVE-2026-26209 Upstream summary: cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) serialization format. Starting in version 3.0.0 and prior to version 5.8.0, whhen […]
🟢 Low ⏱ 5–15 min Last verified: 7 July 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-43859 Upstream summary: h11 is a Python implementation of HTTP/1.1. Prior to version 0.16.0, a leniency in h11's parsing of line terminators in chunked-coding message bodies can lead […]
🟢 Low ⏱ 5–15 min Last verified: 7 July 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-11568 Upstream summary: A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 3.8.5-r0 📖 ~4 min read • Source: Alpine secdb entry — gnutls 3.8.5-r0 Related CVEs: CVE-2024-28834 CVE-2024-28835 CVE-2023-5981 CVE-2024-0553 CVE-2024-0567 CVE-2026-3832 CVE-2026-3833 CVE-2026-5260 +12 more Upstream summary: Alpine main repository for vedge ships gnutls 3.8.5-r0 which […]
🟢 Low ⏱ 5–15 min Last verified: 7 July 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8115-1 Related CVEs: CVE-2026-27459 CVE-2026-27448 Upstream summary: It was discovered that pyOpenSSL incorrectly handled exceptions in the tlsext_servername callback. This could result in connections being accepted after an exception, contrary […]
🟠 High ⏱ 15–60 min Last verified: 7 July 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8023-1 Related CVEs: CVE-2026-25210 CVE-2026-24515 CVE-2012-1148 CVE-2015-1283 CVE-2016-0718 CVE-2016-4472 CVE-2018-20843 CVE-2019-15903 +11 more Upstream summary: It was discovered that Expat, contained within the xmltok library, incorrectly handled the initialization of […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 9 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2025:23049 Related CVEs: CVE-2025-31651 CVE-2025-55752 Upstream summary: Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * tomcat: Apache Tomcat: Bypass of […]
