NetBSD

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2020-11958 CVE-2018-21232 CVE-2022-23901 CVE-2026-2903 Upstream summary: pkgsrc audit-packages flagged re2c>=1.2<2.0 for vulnerability class 'heap-overflow'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-11958 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2016-10516 CVE-2020-28724 CVE-2023-23934 CVE-2026-21860 CVE-2026-27199 CVE-2023-25577 Upstream summary: pkgsrc audit-packages flagged py{27,33,34,35,36}-werkzeug<0.11.1 for vulnerability class 'cross-site-scripting'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2016-10516 Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-12119 CVE-2025-14911 CVE-2026-4359 Upstream summary: pkgsrc audit-packages flagged mongo-c-driver<1.30.6 for vulnerability class 'null-pointer-dereference'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-12119 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-68119 CVE-2025-47912 CVE-2025-58189 CVE-2025-61727 CVE-2025-61731 CVE-2025-61732 CVE-2025-68121 CVE-2026-25679  +12 more Upstream summary: pkgsrc audit-packages flagged go125<1.25.6 for vulnerability class 'code-execution'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-68119 Table of contents Symptom & Impact Environment […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-40924 Upstream summary: pkgsrc audit-packages flagged p5-Catalyst-Plugin-Session<0.44 for vulnerability class 'lack-of-entropy'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-40924 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2026-25765 Upstream summary: pkgsrc audit-packages flagged ruby{32,33,34}-faraday<2.14.1 for vulnerability class 'server-side-request-forgery'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-25765 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2013-5123 CVE-2019-20916 CVE-2021-3572 CVE-2023-5752 CVE-2026-1703 Upstream summary: pkgsrc audit-packages flagged py{25,26,27,31,32}-pip<1.3 for vulnerability class 'insecure-temp-files'. Reference: http://secunia.com/advisories/52674/ Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2019-9928 CVE-2023-37328 CVE-2023-37329 CVE-2024-4453 CVE-2025-47806 CVE-2026-2921 CVE-2025-47807 CVE-2025-47808 Upstream summary: pkgsrc audit-packages flagged gst-plugins1-base<1.16.0 for vulnerability class 'heap-overflow'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2019-9928 Table of contents Symptom & Impact Environment & Reproduction […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2021-45931 CVE-2024-56732 CVE-2015-8947 CVE-2015-9274 CVE-2022-33068 CVE-2023-25193 CVE-2026-22693 Upstream summary: pkgsrc audit-packages flagged harfbuzz<2.9.1 for vulnerability class 'out-of-bounds-write'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-45931 Table of contents Symptom & Impact Environment & Reproduction Root […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-6275 CVE-2025-15411 CVE-2025-15412 CVE-2025-6273 CVE-2025-6274 Upstream summary: pkgsrc audit-packages flagged wabt-[0-9]* for vulnerability class 'use-after-free'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-6275 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]