CVE-2013-7325

CVE-2013-7325 : The issue affects the uscan utility in the devscripts package prior to 2.13.19. A crafted tarball could be exploited to execute arbitrary code on the remote system running uscan, with the attacker gaining the privileges of that user. The available connected documents consistently ...

CVE-2018-13043

CVE-2018-13043 affects Debian devscripts up to 2.18.3, where scripts/grep-excuses.pl loads YAML unsafely (YAML::Syck without blessing), enabling code execution. Other advisories (Ubuntu USN-3704-1, Fedora updates) reference the same issue and indicate fixes to devscripts 2.18.4. The vulnerability...

CVE-2025-8454

CVE-2025-8454 affects the uscan component of devscripts. The vulnerability arises because uscan skips OpenPGP verification when the upstream source has already been downloaded in a prior run, even if verification had failed previously. This behavior is described across multiple sources (e.g., Red...