🟢 Low ⏱ 5–15 min Last verified: 13 November 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-27407 Upstream summary: graphql-ruby is a Ruby implementation of GraphQL. Starting in version 1.11.5 and prior to versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21, loading a malicious […]
🟢 Low ⏱ 5–15 min Last verified: 13 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-16491 CVE-2018-16492 Upstream summary: A prototype pollution vulnerability was found in node.extend <1.1.7, ~<2.0.1 that allows an attacker to inject arbitrary properties onto Object.prototype. Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 13 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-23467 CVE-2022-29021 CVE-2022-29022 CVE-2022-29023 CVE-2025-32776 Upstream summary: OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a […]
PostgreSQL Streaming Replication sends WAL (Write-Ahead Log) records from a primary server to one or more standby servers in near-real-time, keeping standbys continuously synchronised with the primary. This provides high availability (automatic or manual failover when the primary fails), read scaling (queries can be distributed to hot standbys), and geographic redundancy. Unlike logical replication which […]
🟢 Low ⏱ 5–15 min Last verified: 13 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-4012 Upstream summary: Multiple integer overflows in LibThai before 0.1.13 might allow context-dependent attackers to execute arbitrary code via long strings that trigger heap-based buffer overflows, related to […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.20 / fixed in 1.11.1-r2 📖 ~4 min read • Source: Alpine secdb entry — taglib 1.11.1-r2 Related CVEs: CVE-2017-12678 CVE-2018-11439 Upstream summary: Alpine community repository for vv3.20 ships taglib 1.11.1-r2 which addresses CVE-2017-12678. Table of contents Symptom & Impact […]
🟡 Medium ⏱ 10–30 min Last verified: 13 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-40983 CVE-2022-43591 CVE-2025-12385 Upstream summary: An integer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2. A specially-crafted javascript code can trigger an […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.20 / fixed in 1.1.1-r0 📖 ~4 min read • Source: Alpine secdb entry — rekor 1.1.1-r0 Related CVEs: CVE-2023-30551 Upstream summary: Alpine community repository for vv3.20 ships rekor 1.1.1-r0 which addresses CVE-2023-30551. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 13 November 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-66453 Upstream summary: Rhino is an open-source implementation of JavaScript written entirely in Java. Prior to 1.8.1, 1.7.15.1, and 1.7.14.1, when an application passed an attacker controlled float […]
🟡 Medium ⏱ 10–30 min Last verified: 13 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-11230 CVE-2023-46362 CVE-2023-46363 Upstream summary: jbig2_add_page in jbig2enc.cc in libjbig2enc.a in jbig2enc 0.29 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other […]
