ROOT-OS-DEBIAN-12-CVE-2026-50219 CVE-2026-50219 in expat - Patched by Root

Root has patched CVE-2026-50219 in the expat package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-1940 CVE-2026-1940 in gst-plugins-good1.0 - Patched by Root

Root has patched CVE-2026-1940 in the gst-plugins-good1.0 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-46470 CVE-2026-46470 in gst-plugins-good1.0 - Patched by Root

Root has patched CVE-2026-46470 in the gst-plugins-good1.0 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-53705 CVE-2026-53705 in gst-plugins-good1.0 - Patched by Root

Root has patched CVE-2026-53705 in the gst-plugins-good1.0 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-3083 CVE-2026-3083 in gst-plugins-good1.0 - Patched by Root

Root has patched CVE-2026-3083 in the gst-plugins-good1.0 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-3085 CVE-2026-3085 in gst-plugins-good1.0 - Patched by Root

Root has patched CVE-2026-3085 in the gst-plugins-good1.0 package for Root:Debian:12. Multiple fixed versions available...

DEBIAN-CVE-2026-82677

A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function moduleTimerHandler of the file src/module.c of the component Module Timer Subsystem. This manipulation causes double free. The attack can be initiated remotely. The exploit has been publicly disclosed and may be...

DEBIAN-CVE-2026-19873

HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements. When a Repeatable element has countername set, its process method reads the repeat count from the named query string parameter, checks only that it is ...

ROOT-OS-DEBIAN-11-CVE-2026-44690 CVE-2026-44690 in unbound - Patched by Root

Root has patched CVE-2026-44690 in the unbound package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-42959 CVE-2026-42959 in unbound - Patched by Root

Root has patched CVE-2026-42959 in the unbound package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-42960 CVE-2026-42960 in unbound - Patched by Root

Root has patched CVE-2026-42960 in the unbound package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-40691 CVE-2026-40691 in unbound - Patched by Root

Root has patched CVE-2026-40691 in the unbound package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-32665 CVE-2026-32665 in unbound - Patched by Root

Root has patched CVE-2026-32665 in the unbound package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-40622 CVE-2026-40622 in unbound - Patched by Root

Root has patched CVE-2026-40622 in the unbound package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-42944 CVE-2026-42944 in unbound - Patched by Root

Root has patched CVE-2026-42944 in the unbound package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-50252 CVE-2026-50252 in unbound - Patched by Root

Root has patched CVE-2026-50252 in the unbound package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-33278 CVE-2026-33278 in unbound - Patched by Root

Root has patched CVE-2026-33278 in the unbound package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-55973 CVE-2026-55973 in unbound - Patched by Root

Root has patched CVE-2026-55973 in the unbound package for Root:Debian:11. Multiple fixed versions available...

DEBIAN-CVE-2026-82853

Nodemailer versions before 8.0.5 contain an SMTP command injection vulnerability in the transport name option used in EHLO/HELO commands. The name parameter is concatenated directly into SMTP commands without sanitizing carriage return and line feed characters, allowing attackers to inject...

DEBIAN-CVE-2026-82854

Nodemailer before 8.0.4 is vulnerable to SMTP command injection through the unsanitized envelope.size parameter. When an application passes a custom envelope object with a size property containing CRLF characters to sendMail, the value is concatenated into the SMTP MAIL FROM command as SIZE=...