Fix Prevention

🟡 Medium   ⏱ 10–30 min  Last verified: 27 February 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8198-1 Related CVEs: CVE-2026-31958 CVE-2026-35536 CVE-2025-67724 CVE-2025-67725 CVE-2025-67726 CVE-2023-28370 CVE-2024-52804 Upstream summary: It was discovered that Tornado incorrectly handled parsing of large multipart request bodies. An attacker could possibly use […]

🟡 Medium   ⏱ 10–30 min  Last verified: 27 February 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8133-1 Related CVEs: CVE-2026-32597 https://launchpad.net/bugs/1986487 CVE-2022-29217 Upstream summary: It was discovered that PyJWT did not validate the critical header parameter, contrary to the RFC specification expectations. A remote attacker could […]

🟠 High   ⏱ 15–60 min  Last verified: 27 February 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7955-2 Related CVEs: CVE-2026-21441 https://bugs.launchpad.net/bugs/2138420 CVE-2025-66418 CVE-2025-66471 CVE-2025-50182 CVE-2025-50181 CVE-2024-37891 CVE-2018-25091  +2 more Upstream summary: USN-7955-1 fixed vulnerabilities in urllib3. The update introduced a regression in response streaming on Ubuntu […]

🟢 Low   ⏱ 5–15 min  Last verified: 27 February 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8218-1 Related CVEs: CVE-2025-53391 Upstream summary: Aaron Rainbolt discovered that zuluCrypt used insecure PolicyKit settings in zuluPolkit. An attacker could possibly use this issue to cause local privilege escalation to […]