🟢 Low ⏱ 5–15 min Last verified: 20 May 2026 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Vulnerability found in Expat Related CVEs: CVE-2026-45186 Upstream summary: Expat 2.8.1 was released yesterday. The key motivation for cutting a release and doing so now was: Fixing vulnerability CVE-2026-45186 that […]
🟢 Low ⏱ 5–15 min Last verified: 20 May 2026 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-ormar — vulnerabilities Related CVEs: CVE-2026-26198 CVE-2026-27953 Upstream summary: https://github.com/ormar-orm/ormar/security/advisories reports: SQL Injection in aggregate functions min() and max() Pydantic Validation Bypass via __pk_only__ and __excluded__ Kwargs Injection in Model […]
🟡 Medium ⏱ 10–30 min Last verified: 20 May 2026 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Gimp — GIMP FLI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability Related CVEs: CVE-2017-17786 CVE-2025-2760 CVE-2025-2761 Upstream summary: [email protected] reports: GIMP FLI File Parsing Out-Of-Bounds Write Remote Code Execution […]
🟡 Medium ⏱ 10–30 min Last verified: 20 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Loofah — XSS vulnerability Related CVEs: CVE-2018-16468 CVE-2018-8048 CVE-2019-15587 Upstream summary: GitHub issue: This issue has been created for public disclosure of an XSS vulnerability that was responsibly reported by […]
🟡 Medium ⏱ 10–30 min Last verified: 20 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: django — multiple vulnerabilities Related CVEs: CVE-2008-2302 CVE-2009-3695 CVE-2010-3082 Upstream summary: The Django project reports: Please reference CVE/URL list for details Table of contents Symptom & Impact Environment & Reproduction […]
🟢 Low ⏱ 5–15 min Last verified: 20 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libcdaudio — remote buffer overflow and code execution Related CVEs: CVE-2005-0706 CVE-2008-5030 Upstream summary: securityfocus reports: The 'libcdaudio' library is prone to a remote heap code in the context of […]
🟢 Low ⏱ 5–15 min Last verified: 20 May 2026 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-strawberry-graphql — Multiple vulnerabilities Related CVEs: CVE-2026-35523 CVE-2026-35526 Upstream summary: The Strawberry GraphQL project reports: Strawberry up until version 0.312.3 is vulnerable to an authentication bypass on WebSocket subscription endpoints. […]
🟢 Low ⏱ 5–15 min Last verified: 20 May 2026 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: spotipy — CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Related CVEs: CVE-2025-66040 Upstream summary: https://github.com/spotipy-dev/spotipy/security/advisories/GHSA-r77h-rpp9-w2xm reports: Spotipy is a Python library for the Spotify Web API. […]
🟡 Medium ⏱ 10–30 min Last verified: 20 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tor — security regression Related CVEs: CVE-2009-0414 CVE-2009-0936 CVE-2009-0937 CVE-2009-0938 CVE-2010-1676 CVE-2011-0427 CVE-2014-5117 CVE-2017-0377 Upstream summary: The Tor Project reports: Tor 0.3.0.9 fixes a path selection bug that would allow […]
🟠 High ⏱ 15–60 min Last verified: 19 May 2026 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: traefik — Unauthorized exposure of the REST provider Related CVEs: CVE-2018-15598 CVE-2019-9512 CVE-2019-9514 CVE-2022-23469 CVE-2022-41721 CVE-2022-46153 CVE-2023-24534 CVE-2023-29013 +12 more Upstream summary: The traefik project releases a new version addressing […]
