NetBSD 9.4

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-5991 CVE-2025-5455 CVE-2025-5992 Upstream summary: pkgsrc audit-packages flagged qt6-qtbase>=6.9.0<6.9.1 for vulnerability class 'use-after-free'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-5991 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-13566 Upstream summary: pkgsrc audit-packages flagged nnn-[0-9]* for vulnerability class 'double-free'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-13566 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-55130 CVE-2025-55132 CVE-2026-0775 CVE-2025-55131 CVE-2025-59465 CVE-2025-59466 CVE-2026-21637 Upstream summary: pkgsrc audit-packages flagged nodejs20<20.20.0 for vulnerability class 'security-bypass'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-55130 Table of contents Symptom & Impact Environment & Reproduction Root […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-10994 CVE-2025-10995 CVE-2025-10996 CVE-2025-10997 CVE-2025-10998 CVE-2025-10999 CVE-2025-11000 CVE-2026-2704  +2 more Upstream summary: pkgsrc audit-packages flagged openbabel-[0-9]* for vulnerability class 'use-after-free'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-10994 Table of contents Symptom & Impact Environment […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2019-5477 CVE-2012-6685 CVE-2020-26247 CVE-2021-41098 CVE-2022-24836 CVE-2022-29181 CVE-2022-23476 CVE-2025-6490  +3 more Upstream summary: pkgsrc audit-packages flagged ruby{22,23,24,25,26}-nokogiri<1.10.4 for vulnerability class 'command-injection'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2019-5477 Table of contents Symptom & Impact Environment […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-53603 Upstream summary: pkgsrc audit-packages flagged SOPE<2.4.3nb2 for vulnerability class 'denial-of-service'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-53603 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-8291 CVE-2025-11468 CVE-2025-15282 CVE-2025-15366 CVE-2025-15367 CVE-2026-0672 CVE-2026-0865 CVE-2025-12781  +10 more Upstream summary: pkgsrc audit-packages flagged python314<3.14.0nb2 for vulnerability class 'invalid-validation'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-8291 Table of contents Symptom & Impact Environment […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2026-32274 Upstream summary: pkgsrc audit-packages flagged py{27,310,311,312,313,314}-black<26.3.1 for vulnerability class 'path-traversal'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-32274 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-62490 CVE-2025-62491 CVE-2023-31922 CVE-2025-62492 CVE-2025-62493 CVE-2025-62494 CVE-2025-62495 CVE-2025-62496  +4 more Upstream summary: pkgsrc audit-packages flagged quickjs<20250913 for vulnerability class 'use-after-free'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-62490 Table of contents Symptom & Impact Environment […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2007-6353 CVE-2025-26623 CVE-2017-12955 CVE-2017-12957 CVE-2017-14858 CVE-2017-14863 CVE-2017-14865 CVE-2017-1000126  +12 more Upstream summary: pkgsrc audit-packages flagged exiv2<0.16 for vulnerability class 'arbitrary-code-execution'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6353 Table of contents Symptom & Impact Environment […]