NetBSD 9.4

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2022-40898 CVE-2026-24049 Upstream summary: pkgsrc audit-packages flagged py{27,36,37,38,39,310,311}-wheel<0.38.1 for vulnerability class 'input-validation'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-40898 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2022-28506 CVE-2023-48161 CVE-2025-31344 CVE-2024-45993 CVE-2026-23868 CVE-2018-11490 CVE-2019-15133 CVE-2023-39742  +1 more Upstream summary: pkgsrc audit-packages flagged giflib<5.2.1nb5 for vulnerability class 'heap-buffer-overflow'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-28506 Table of contents Symptom & Impact Environment […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-64076 CVE-2024-26134 CVE-2025-68131 Upstream summary: pkgsrc audit-packages flagged py{27,39,310,311,312,313,314}-cbor2<5.7.1 for vulnerability class 'multiple-vulnerabilities'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-64076 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-12762 CVE-2025-13780 CVE-2025-9636 CVE-2025-12763 CVE-2025-12765 CVE-2025-60796 CVE-2025-60797 CVE-2025-60798  +4 more Upstream summary: pkgsrc audit-packages flagged php{56,74,81,82,83,84}-phppgadmin<9.10 for vulnerability class 'remote-code-execution'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-12762 Table of contents Symptom & Impact Environment […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2021-29434 CVE-2021-32681 CVE-2022-21683 CVE-2026-25517 CVE-2026-28222 CVE-2026-28223 Upstream summary: pkgsrc audit-packages flagged py{36,37,38,39}-wagtail<2.12.4 for vulnerability class 'cross-site-scripting'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-29434 Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2015-4035 CVE-2025-31115 Upstream summary: pkgsrc audit-packages flagged xz<5.2.0 for vulnerability class 'arbitrary-code-execution'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2015-4035 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-57804 Upstream summary: pkgsrc audit-packages flagged py{27,39,310,311,312,313}-h2<4.3.0 for vulnerability class 'request-smuggling'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-57804 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-40923 CVE-2013-10031 Upstream summary: pkgsrc audit-packages flagged p5-Plack-Middleware-Session<0.35 for vulnerability class 'insufficiently-random-numbers'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-40923 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-68146 CVE-2026-22701 Upstream summary: pkgsrc audit-packages flagged py{27,39,310,311,312,313,314}-filelock<3.20.1 for vulnerability class 'symlink-attack'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-68146 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-0838 Upstream summary: pkgsrc audit-packages flagged abseil<20250127 for vulnerability class 'buffer-overflow'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-0838 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]