NetBSD

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2020-24240 CVE-2025-8734 CVE-2020-14150 CVE-2020-24979 CVE-2020-24980 CVE-2025-8733 Upstream summary: pkgsrc audit-packages flagged bison<3.7.1 for vulnerability class 'use-after-free'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-24240 Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-8291 CVE-2025-11468 CVE-2025-15282 CVE-2025-15366 CVE-2025-15367 CVE-2026-0672 CVE-2026-0865 CVE-2025-12781  +10 more Upstream summary: pkgsrc audit-packages flagged python314<3.14.0nb2 for vulnerability class 'invalid-validation'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-8291 Table of contents Symptom & Impact Environment […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2026-32239 CVE-2026-32240 Upstream summary: pkgsrc audit-packages flagged capnproto<1.4.0 for vulnerability class 'http-request-smuggling'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-32239 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-8869 Upstream summary: pkgsrc audit-packages flagged py27-pip-[0-9]* for vulnerability class 'symlink-attack'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-8869 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-68616 Upstream summary: pkgsrc audit-packages flagged py{27,310,311,312,313,314}-weasyprint<68.0 for vulnerability class 'server-side-request-forgery'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-68616 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2024-52530 CVE-2025-32906 CVE-2026-2369 CVE-2024-52532 CVE-2025-32049 Upstream summary: pkgsrc audit-packages flagged libsoup3<3.6.0 for vulnerability class 'request-smuggling'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-52530 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2021-3623 CVE-2023-1017 CVE-2023-1018 CVE-2025-49133 CVE-2026-21444 Upstream summary: pkgsrc audit-packages flagged libtpms<0.9.0 for vulnerability class 'out-of-bounds-read'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-3623 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-53367 CVE-2021-46312 CVE-2021-46310 Upstream summary: pkgsrc audit-packages flagged djvulibre<3.5.29 for vulnerability class 'out-of-bounds-read'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-53367 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-54349 CVE-2025-54351 CVE-2023-38403 CVE-2024-26306 CVE-2025-54350 CVE-2023-7250 CVE-2024-53580 Upstream summary: pkgsrc audit-packages flagged iperf3<3.19.1 for vulnerability class 'heap-overflow'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-54349 Table of contents Symptom & Impact Environment & Reproduction Root […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2026-1998 Upstream summary: pkgsrc audit-packages flagged micropython<1.28.0 for vulnerability class 'memory-corruption'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-1998 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]