🟠 High ⏱ 15–60 min Last verified: 29 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-24859 CVE-2023-36810 CVE-2025-55197 CVE-2026-22690 CVE-2026-22691 CVE-2026-24688 CVE-2026-27024 CVE-2026-27025 +12 more Upstream summary: PyPDF2 is an open source python PDF library capable of splitting, merging, cropping, and transforming the […]
🟡 Medium ⏱ 10–30 min Last verified: 29 May 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-21366 CVE-2021-32796 CVE-2022-37616 CVE-2022-39353 CVE-2026-34601 CVE-2026-41672 CVE-2026-41673 CVE-2026-41674 +1 more Upstream summary: xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. […]
🟡 Medium ⏱ 10–30 min Last verified: 29 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-2175 CVE-2018-11797 CVE-2018-8036 CVE-2021-31811 CVE-2021-31812 CVE-2026-23907 CVE-2026-33929 Upstream summary: Apache PDFBox before 1.8.12 and 2.x before 2.0.1 does not properly initialize the XML parsers, which allows context-dependent attackers […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2026-3193 Related CVEs: CVE-2026-2005 CVE-2026-2003 CVE-2026-2004 CVE-2026-2006 CVE-2012-0868 CVE-2017-7484 CVE-2019-10130 CVE-2024-21096 +12 more Upstream summary: Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as […]
🟡 Medium ⏱ 10–30 min Last verified: 29 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-3146 CVE-2018-19787 CVE-2020-27783 CVE-2021-28957 CVE-2021-43818 CVE-2022-2309 CVE-2026-41066 Upstream summary: Incomplete blacklist vulnerability in the lxml.html.clean module in lxml before 3.3.5 allows remote attackers to conduct cross-site scripting (XSS) […]
🟡 Medium ⏱ 10–30 min Last verified: 29 May 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3560 CVE-2009-3720 CVE-2025-9301 Upstream summary: The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to cause […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 8 📖 ~4 min read • Source: Red Hat advisory RHSA RHSA-2026:19455 Related CVEs: CVE-2025-59032 CVE-2026-27857 CVE-2026-27858 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution […]
🟡 Medium ⏱ 10–30 min Last verified: 29 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-10518 CVE-2016-10542 CVE-2021-32640 CVE-2024-37890 CVE-2026-45736 Upstream summary: A vulnerability was found in the ping functionality of the ws module before 1.0.0 which allowed clients to allocate memory by […]
🟠 High ⏱ 15–60 min Last verified: 29 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8102-1 Related CVEs: CVE-2026-3888 CVE-2024-1724 CVE-2024-29068 CVE-2024-29069 CVE-2023-1523 CVE-2022-3328 https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/1961365 https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/1961791 +7 more Upstream summary: Qualys discovered that snapd incorrectly handled certain operations in the snap's private /tmp directory. If […]
🟡 Medium ⏱ 10–30 min Last verified: 29 May 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8063-1 Related CVEs: CVE-2026-0994 CVE-2024-7254 CVE-2025-4565 CVE-2021-22569 CVE-2021-22570 CVE-2022-1941 Upstream summary: It was discovered that Protocol Buffers incorrectly handled recursion when the Python google.protobuf.json_format.ParseDict() function is being used. An attacker […]
