DEBIAN-CVE-2026-45073

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, PdoAdapter::doClear builds a DELETE statement using a namespace derived from the caller-supplied $prefix without binding or escaping it, allowing a caller...

DEBIAN-CVE-2026-45072

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.4.24 until 6.4.40, 7.4.12, and 8.0.12, the development profiler fileexcerpt Twig filter escapes PHP files through highlightstring but interpolates lines from non-PHP files directly into...

DEBIAN-CVE-2026-45756

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 7.3.0-BETA1 until 7.4.12 and 8.0.12, the JsonPath component compiles attacker-controlled match and search filter patterns directly into pregmatch without a length cap, i-regexp restriction, or...

DEBIAN-CVE-2026-45074

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 7.1.0 until 7.4.12 and 8.0.12, Cas2Handler builds the CAS service parameter from Request::getSchemeAndHttpHost, which reflects an attacker-controlled Host header when framework.trustedhosts is n...

DEBIAN-CVE-2026-15747

Mojolicious versions from 4.59 before 9.48 for Perl expose a stable representation of the session CSRF token to a BREACH compression oracle. csrftoken generates and caches one token per session and returns the same value on every call, and csrffield places that value in a hidden csrftoken input...

DEBIAN-CVE-2026-15392

DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location. The completetablename method builds the absolute table file path without checking whether the file is a symbolic link. A link inside the data directory can point to a table file at any...

MINI-VHPC-P2RG-HHWP

Bulletin has no description...

MINI-JX7F-G3FV-3HWG

Bulletin has no description...

MINI-XV27-JF95-4GWF

Bulletin has no description...

MINI-65V7-HWPP-FW54

Bulletin has no description...

MINI-837X-6946-MJHJ

Bulletin has no description...

MINI-HCH6-9FJ2-7MVJ

Bulletin has no description...

MINI-FWGX-V4RR-Q2VJ

Bulletin has no description...

MINI-86MH-8XCC-334M

Bulletin has no description...

MINI-85C7-PJ4V-7FPM

Bulletin has no description...

MINI-CM64-H9VP-7JPG

Bulletin has no description...

MINI-29CG-PF2V-CMFP

Bulletin has no description...

DEBIAN-CVE-2026-57433

Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SXHOOK record. retrievehookcommon reads a signed 32-bit item count from an SXHOOK record and calls avextend with that count plus one. A count of I32MAX wraps the addition to a negative value. A...

MINI-774J-V278-WR8H

Bulletin has no description...

DEBIAN-CVE-2026-40553

Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk ftype routine. This issue could be used to crash the program and potentially to achieve code execution, although the latter has not been confirmed to be feasible. It affects gawk in versions 5.4.0 and below...