NetBSD 9.4

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-54314 Upstream summary: pkgsrc audit-packages flagged ruby{31,32,33,34}-thor<1.4.0 for vulnerability class 'command-injection'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-54314 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2018-16632 CVE-2020-19002 CVE-2025-6050 CVE-2025-50481 Upstream summary: pkgsrc audit-packages flagged py{27,34,35,36,37,38}-mezzanine-[0-9]* for vulnerability class 'cross-site-scripting'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2018-16632 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2022-4639 CVE-2025-52936 CVE-2025-46806 CVE-2025-46807 Upstream summary: pkgsrc audit-packages flagged sslh-[0-9]* for vulnerability class 'remote-code-injection'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-4639 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2023-4822 CVE-2024-9476 CVE-2026-21721 CVE-2018-12099 CVE-2018-15727 CVE-2018-19039 CVE-2018-1000816 CVE-2019-13068  +12 more Upstream summary: pkgsrc audit-packages flagged grafana<10.1.3 for vulnerability class 'privilege-escalation'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-4822 Table of contents Symptom & Impact Environment […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2026-28231 Upstream summary: pkgsrc audit-packages flagged py{27,310,311,312,313,314}-pillow_heif<1.3.0 for vulnerability class 'out-of-bounds-read'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-28231 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-43859 Upstream summary: pkgsrc audit-packages flagged py{39,310,311,312,313}-h11<0.16.0 for vulnerability class 'request-smuggling'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-43859 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2010-2539 CVE-2010-2540 CVE-2017-5522 CVE-2010-1678 CVE-2021-32062 CVE-2025-59431 Upstream summary: pkgsrc audit-packages flagged mapserver<5.6.4 for vulnerability class 'remote-system-access'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2539 Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2021-41802 CVE-2021-42135 CVE-2025-5999 CVE-2025-6000 CVE-2020-7220 CVE-2020-10660 CVE-2020-10661 CVE-2020-12757  +12 more Upstream summary: pkgsrc audit-packages flagged vault<1.8.4 for vulnerability class 'privilege-escalation'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-41802 Table of contents Symptom & Impact Environment […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-32433 CVE-2014-1693 CVE-2015-2774 CVE-2016-10253 CVE-2017-1000385 CVE-2016-1000107 CVE-2020-25623 CVE-2020-35733  +12 more Upstream summary: pkgsrc audit-packages flagged erlang<14.1.2 for vulnerability class 'remote-system-access'. Reference: http://secunia.com/advisories/43898/ Table of contents Symptom & Impact Environment […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-47278 CVE-2018-1000656 CVE-2019-1010083 CVE-2026-27205 Upstream summary: pkgsrc audit-packages flagged py{39,310,311,312,313}-flask>=3.1.0<3.1.1 for vulnerability class 'improper-access-control'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-47278 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]