NetBSD

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2010-4259 CVE-2020-5395 CVE-2025-15269 CVE-2025-15270 CVE-2025-15271 CVE-2025-15276 CVE-2025-15280 CVE-2017-17521  +12 more Upstream summary: pkgsrc audit-packages flagged fontforge<20100501nb4 for vulnerability class 'remote-system-access'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4259 Table of contents Symptom & Impact Environment […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2024-47771 CVE-2025-59161 CVE-2024-51749 CVE-2024-47779 CVE-2024-51750 CVE-2025-32026 Upstream summary: pkgsrc audit-packages flagged element-web<1.11.81 for vulnerability class 'expose-access-tokens'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-47771 Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-12385 Upstream summary: pkgsrc audit-packages flagged qt6-qtdeclarative<6.10.2 for vulnerability class 'denial-of-service'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-12385 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-40931 Upstream summary: pkgsrc audit-packages flagged p5-Apache-Session-Generate-[0-9]* for vulnerability class 'weak-cryptography'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-40931 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-49466 Upstream summary: pkgsrc audit-packages flagged aerc<0.21.0 for vulnerability class 'directory-traversal'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-49466 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2023-36617 CVE-2025-24294 Upstream summary: pkgsrc audit-packages flagged ruby32-base>=3.2<3.2.3nb1 for vulnerability class 'remote-code-execution'. Reference: https://www.ruby-lang.org/en/news/2024/03/21/rce-rdoc-cve-2024-27281/ Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2023-53154 CVE-2025-57052 CVE-2023-26819 CVE-2023-50471 CVE-2023-50472 CVE-2024-31755 Upstream summary: pkgsrc audit-packages flagged cJSON<1.7.18 for vulnerability class 'heap-buffer-overflow'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-53154 Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-67221 Upstream summary: pkgsrc audit-packages flagged py{27,310,311,312,313,314}-orjson-[0-9]* for vulnerability class 'denial-of-service'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-67221 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-3010 Upstream summary: pkgsrc audit-packages flagged glslang<1.4.350.0 for vulnerability class 'null-pointer-dereference'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-3010 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-9301 Upstream summary: pkgsrc audit-packages flagged cmake<4.1.0nb1 for vulnerability class 'denial-of-service'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-9301 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]