FreeBSD 14

🟠 High   ⏱ 15–60 min  Last verified: 10 May 2026 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: python — more webbrowser.open() command injection vulnerabilities Related CVEs: CVE-2005-0089 CVE-2006-4980 CVE-2008-1721 CVE-2008-2315 CVE-2008-2316 CVE-2008-3142 CVE-2008-3144 CVE-2012-0845  +12 more Upstream summary: Seth Larson reports: [CVE-2026-4786] Incomplete mitigation of CVE-2026-4519, %action […]

🟢 Low   ⏱ 5–15 min  Last verified: 8 May 2026 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: vim — Improper Input Validation in Vim Related CVEs: CVE-2008-3076 CVE-2025-27423 Upstream summary: [email protected] reports: Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of (compressed […]

🟢 Low   ⏱ 5–15 min  Last verified: 7 May 2026 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-social-auth-app-django — Unsafe account association Related CVEs: CVE-2025-61783 Upstream summary: Michal Čihař reports: Upon authentication, the user could be associated by e-mail even if the associate_by_email pipeline was not included. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 2 May 2026 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: go-ethereum — vulnerabilities Related CVEs: CVE-2026-26313 CVE-2026-26314 CVE-2026-26315 Upstream summary: https://github.com/ethereum/go-ethereum/security/advisories reports: DoS via malicious p2p message (CVE-2026-26313) DoS via malicious p2p message (CVE-2026-26314) Improper ECIES Public Key Validation in […]

🟢 Low   ⏱ 5–15 min  Last verified: 2 May 2026 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-ormar — vulnerabilities Related CVEs: CVE-2026-26198 CVE-2026-27953 Upstream summary: https://github.com/ormar-orm/ormar/security/advisories reports: SQL Injection in aggregate functions min() and max() Pydantic Validation Bypass via __pk_only__ and __excluded__ Kwargs Injection in Model […]

🟢 Low   ⏱ 5–15 min  Last verified: 29 April 2026 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: fluidsynth — Use after free when using DLS files Related CVEs: CVE-2025-68617 Upstream summary: The fluidsynth authors report: A race condition during unloading of a DLS file can trigger a […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 April 2026 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-social-auth-app-django — Unsafe account association Related CVEs: CVE-2024-32879 CVE-2025-61783 Upstream summary: Michal Čihař reports: Upon authentication, the user could be associated by e-mail even if the associate_by_email pipeline was not […]

🟡 Medium   ⏱ 10–30 min  Last verified: 21 April 2026 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: OpenSSL — multiple vulnerabilities Related CVEs: CVE-2025-9230 CVE-2025-9231 CVE-2025-9232 Upstream summary: The OpenSSL project reports reports: Out-of-bounds read & write in RFC 3211 KEK Unwrap Timing side-channel in SM2 algorithm […]

🟡 Medium   ⏱ 10–30 min  Last verified: 21 April 2026 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Python — The webbrowser.open() API allows leading dashes Related CVEs: CVE-2025-15366 CVE-2025-15367 CVE-2026-0865 CVE-2026-1299 CVE-2026-4519 Upstream summary: https://github.com/python/cpython/pull/143931 reports: The webbrowser.open() API would accept leading dashes in the URL which […]