This page lists packages that may or may not be affected by known issues. This means that some additional work needs to be done to determined whether the package is actually vulnerable or not. This list is a good area for new contributors to make quick and meaningful contributions.
| Package | Bug | Description | Releases |
|---|---|---|---|
| angular.js | CVE-2025-66035 | Angular is a development platform for building mobile and desktop web ... | bookworm, bullseye, forky, sid, trixie |
| CVE-2025-66412 | Angular is a development platform for building mobile and desktop web ... | bookworm, bullseye, forky, sid, trixie | |
| apt-cacher-ng | CVE-2025-11147 | Reflected cross-site scripting (XSS) in Apt-Cacher-NG v3.2.1. The vuln ... | bookworm, bullseye, forky, sid, trixie |
| condor | CVE-2025-66433 | HTCondor Access Point before 25.3.1 allows an authenticated user to im ... | forky, sid, trixie |
| fastdds | CVE-2025-65865 | An integer overflow in eProsima Fast-DDS v3.3 allows attackers to caus ... | bookworm, bullseye, forky, sid, trixie |
| CVE-2025-67108 | eProsima Fast-DDS v3.3 was discovered to contain improper validation f ... | bookworm, bullseye, forky, sid, trixie | |
| golang-github-antonmedv-expr | CVE-2025-68156 | Expr is an expression language and expression evaluation for Go. Prior ... | bookworm, bullseye, forky, sid, trixie |
| kgb-bot | CVE-2015-1554 | kgb-bot 1.33-2 allows remote attackers to cause a denial of service (c ... | bookworm, bullseye, forky, sid, trixie |
| linux | CVE-2020-0347 | In iptables, there is a possible out of bounds write due to an incorre ... | bookworm, bullseye, forky, sid, trixie |
| pam | CVE-2025-8941 | A flaw was found in linux-pam. The pam_namespace module may improperly ... | bookworm, bullseye, forky, sid, trixie |
| phppgadmin | CVE-2025-60796 | phpPgAdmin 7.13.0 and earlier contains multiple cross-site scripting ( ... | forky, sid, trixie |
| CVE-2025-60797 | phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability i ... | forky, sid, trixie | |
| CVE-2025-60798 | phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability i ... | forky, sid, trixie | |
| CVE-2025-60799 | phpPgAdmin 7.13.0 and earlier contains an incorrect access control vul ... | forky, sid, trixie | |
| spip | CVE-2023-53900 | Spip 4.1.10 contains a file upload vulnerability that allows attackers ... | bullseye, forky, sid, trixie |
| wordpress | CVE-2019-8943 | WordPress through 5.0.3 allows Path Traversal in wp_crop_image(). An a ... | bookworm, bullseye, forky, sid, trixie |