Debian: Security Advisory (DSA-6121-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ROOT-OS-DEBIAN-13-CVE-2025-10911 CVE-2025-10911 in rootio-libxslt - Patched by Root

Root has patched CVE-2025-10911 in the rootio-libxslt package for Root:Debian:13. Multiple fixed versions available...

CVE-2025-627288

creationtimestamp| type| source ---|---|--- 2026-02-04 08:13:49+00:00| seen| https://bsky.app/profile/jasonelkin.uk/post/3mdzglfcd4k2j...

CVE-2026-24762

RustFS exposes credentials in plaintext in logs across versions alpha.13–alpha.81 due to logging sensitive credential material (access key, secret key, session token) at INFO level. This information disclosure could allow internal or external log consumers to obtain credentials and compromise Rus...

CVE-2026-24762 RustFS Logs Sensitive Credentials in Plaintext

RustFS is a distributed object storage system built in Rust. From versions alpha.13 to alpha.81, RustFS logs sensitive credential material access key, secret key, session token to application logs at INFO level. This results in credentials being recorded in plaintext in log output, which may be...

CVE-2025-15542

creationtimestamp| type| source ---|---|--- 2026-01-29 20:13:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdllyu3lyv2j...

Debian: Security Advisory (DSA-6112-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AZL-75407 CVE-2025-11065 affecting package coredns 1.11.4-13

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...

Debian: Security Advisory (DSA-6109-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2026-1327

creationtimestamp| type| source ---|---|--- 2026-01-22 15:35:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mczj6ptnps2i...

CVE-2025-10856

creationtimestamp| type| source ---|---|--- 2026-01-22 13:18:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mczbjg5fan24 2026-01-22 15:11:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mczhtn6o2p2n...

CVE-2025-8732

creationtimestamp| type| source ---|---|--- 2026-01-21 16:30:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mcx3s53s2v2z 2026-01-21 21:18:16+00:00| seen| https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875 2026-01-23 08:00:32+00:00| seen|...

AZL-75077 CVE-2025-59465 affecting package nodejs for versions less than 20.14.0-13

A malformed HTTP/2 HEADERS frame with oversized, invalid HPACK data can cause Node.js to crash by triggering an unhandled TLSSocket error ECONNRESET. Instead of safely closing the connection, the process crashes, enabling a remote denial of service. This primarily affects applications that do not...

AZL-74985 CVE-2025-59466 affecting package nodejs for versions less than 20.14.0-13

We have identified a bug in Node.js error handling where "Maximum call stack size exceeded" errors become uncatchable when asynchooks.createHook is enabled. Instead of reaching process.on'uncaughtException', the process terminates, making the crash unrecoverable. Applications that rely on...

CVE-2025-58619

creationtimestamp| type| source ---|---|--- 2026-01-20 20:12:13+00:00| seen| Telegram/o0PAyJQKhHLgWKeUAL4lh3yyPkFb6kcoOvCJ43T8NfWAuHA...

ROOT-OS-DEBIAN-13-CVE-2025-7709 CVE-2025-7709 in rootio-sqlite3 - Patched by Root

Root has patched CVE-2025-7709 in the rootio-sqlite3 package for Root:Debian:13. Multiple fixed versions available...

UBUNTU-CVE-2026-23874

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-13 have a stack overflow via infinite recursion in MSL Magick Scripting Language command when writing to MSL format. Version 7.1.2-13 fixes the issue...

CVE-2026-23876 Heap buffer overflow with attacker-controlled data in XBM parser

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability in the XBM image decoder ReadXBMImage allows an attacker to write controlled data past the allocated heap buffer when...

CVE-2026-23876

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability in the XBM image decoder ReadXBMImage allows an attacker to write controlled data past the allocated heap buffer when...

CVE-2026-23876

CVE-2026-23876 – ImageMagick heap buffer overflow (ReadXBMImage) Affected software: ImageMagick versions prior to 7.1.2-13 and 6.9.13-38.Root cause: heap buffer overflow in the XBM image decoder during processing of crafted images.Impact: attacker can write data past the allocated heap buffer, po...