| Package | Bug | Urgency | Remote | Status |
|---|---|---|---|---|
| admesh | CVE-2026-2653 | not yet assigned | no | unstable is vulnerable |
| allegro4.4 | CVE-2021-36489 | not yet assigned | no | unstable is vulnerable |
| alsa-lib | CVE-2026-25068 | not yet assigned | no | unstable is vulnerable |
| amd64-microcode (non-free-firmware) | CVE-2025-0033 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-29934 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-48514 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-48517 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-52534 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-52536 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-54514 | not yet assigned | no | unstable is vulnerable | |
| angular.js | CVE-2022-25869 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-4690 | not yet assigned | no | unstable is vulnerable | |
| apache-jena | CVE-2025-49656 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-50151 | not yet assigned | no | unstable is vulnerable | |
| apache-log4j2 | CVE-2025-68161 | not yet assigned | no | unstable is vulnerable |
| assertj-core | CVE-2026-24400 | not yet assigned | no | unstable is vulnerable |
| assimp | CVE-2022-38528 | not yet assigned | no | unstable is vulnerable |
| CVE-2024-46632 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-48426 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-2752 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-2753 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-2754 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-2755 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-2756 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-5167 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-5168 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-5169 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-5200 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-5201 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-5202 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-5203 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-5204 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-6119 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-6120 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-11274 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-11275 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-15538 | not yet assigned | no | unstable is vulnerable | |
| audiofile | CVE-2025-50950 | not yet assigned | no | unstable is vulnerable |
| avahi | CVE-2024-52615 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-59529 | not yet assigned | no | unstable is vulnerable | |
| awstats | CVE-2025-63261 | not yet assigned | no | unstable is vulnerable |
| axis | CVE-2023-51441 | not yet assigned | no | unstable is vulnerable |
| black | CVE-2026-32274 | not yet assigned | no | unstable is vulnerable |
| bluez | CVE-2023-44431 | not yet assigned | no | unstable is vulnerable |
| CVE-2023-51580 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-51589 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-51592 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-51594 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-51596 | not yet assigned | no | unstable is vulnerable | |
| bouncycastle | CVE-2025-12194 | not yet assigned | no | unstable is vulnerable |
| c3p0 | CVE-2026-27830 | not yet assigned | no | unstable is vulnerable |
| cairo | CVE-2017-7475 | low | no | unstable is vulnerable |
| CVE-2025-50422 | not yet assigned | no | unstable is vulnerable | |
| cairosvg | CVE-2026-31899 | not yet assigned | no | unstable is vulnerable |
| ceph | CVE-2024-31884 | not yet assigned | ? | unstable is vulnerable |
| chromium | CVE-2026-4439 | not yet assigned | no | fixed in unstable |
| CVE-2026-4440 | not yet assigned | no | fixed in unstable | |
| CVE-2026-4441 | not yet assigned | no | fixed in unstable | |
| CVE-2026-4442 | not yet assigned | no | fixed in unstable | |
| CVE-2026-4443 | not yet assigned | no | fixed in unstable | |
| CVE-2026-4444 | not yet assigned | no | fixed in unstable | |
| CVE-2026-4445 | not yet assigned | no | fixed in unstable | |
| CVE-2026-4446 | not yet assigned | no | fixed in unstable | |
| CVE-2026-4447 | not yet assigned | no | fixed in unstable | |
| CVE-2026-4448 | not yet assigned | no | fixed in unstable | |
| CVE-2026-4449 | not yet assigned | no | fixed in unstable | |
| CVE-2026-4450 | not yet assigned | no | fixed in unstable | |
| CVE-2026-4451 | not yet assigned | no | fixed in unstable | |
| CVE-2026-4452 | not yet assigned | no | fixed in unstable | |
| CVE-2026-4453 | not yet assigned | no | fixed in unstable | |
| CVE-2026-4454 | not yet assigned | no | fixed in unstable | |
| CVE-2026-4455 | not yet assigned | no | fixed in unstable | |
| CVE-2026-4456 | not yet assigned | no | fixed in unstable | |
| CVE-2026-4457 | not yet assigned | no | fixed in unstable | |
| CVE-2026-4458 | not yet assigned | no | fixed in unstable | |
| CVE-2026-4459 | not yet assigned | no | fixed in unstable | |
| CVE-2026-4460 | not yet assigned | no | fixed in unstable | |
| CVE-2026-4461 | not yet assigned | no | fixed in unstable | |
| CVE-2026-4462 | not yet assigned | no | fixed in unstable | |
| CVE-2026-4463 | not yet assigned | no | fixed in unstable | |
| CVE-2026-4464 | not yet assigned | no | fixed in unstable | |
| claws-mail | CVE-2019-10735 | low | no | unstable is vulnerable |
| codemirror-js | CVE-2025-6493 | not yet assigned | no | unstable is vulnerable |
| commons-configuration | CVE-2025-46392 | not yet assigned | no | unstable is vulnerable |
| cosign | CVE-2026-22703 | not yet assigned | no | fixed in unstable |
| CVE-2026-24122 | not yet assigned | no | unstable is vulnerable | |
| coturn | CVE-2026-27624 | not yet assigned | no | unstable is vulnerable |
| cpanminus | CVE-2024-45321 | not yet assigned | no | unstable is vulnerable |
| cpp-httplib | CVE-2025-46728 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-53628 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-53629 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-66570 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-66577 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-21428 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-22776 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-28434 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-28435 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-29076 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-31870 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-32627 | not yet assigned | no | unstable is vulnerable | |
| cups-filters | CVE-2024-47850 | not yet assigned | no | unstable is vulnerable |
| dask.distributed | CVE-2026-23528 | not yet assigned | no | unstable is vulnerable |
| dcmtk | CVE-2025-14607 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-14841 | not yet assigned | no | unstable is vulnerable | |
| deepdiff | CVE-2026-33155 | not yet assigned | no | unstable is vulnerable |
| devscripts | CVE-2025-8454 | not yet assigned | no | unstable is vulnerable |
| diskcache | CVE-2025-69872 | not yet assigned | no | unstable is vulnerable |
| django-allauth | CVE-2025-65430 | not yet assigned | no | fixed in unstable |
| CVE-2025-65431 | not yet assigned | no | fixed in unstable | |
| CVE-2026-27982 | not yet assigned | no | fixed in unstable | |
| docker.io | CVE-2025-54410 | not yet assigned | no | unstable is vulnerable |
| edk2 | CVE-2024-38798 | not yet assigned | no | fixed in unstable |
| erlang | CVE-2026-23941 | not yet assigned | no | fixed in unstable |
| CVE-2026-23942 | not yet assigned | no | fixed in unstable | |
| CVE-2026-23943 | not yet assigned | no | fixed in unstable | |
| erlang-hex | CVE-2026-21619 | not yet assigned | no | unstable is vulnerable |
| ettercap | CVE-2026-3606 | not yet assigned | no | unstable is vulnerable |
| exiftags | CVE-2023-50671 | not yet assigned | no | unstable is vulnerable |
| expat | CVE-2025-66382 | not yet assigned | no | unstable is vulnerable |
| fastdds | CVE-2023-24010 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-62599 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-62600 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-62601 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-62602 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-62603 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-62799 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-64098 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-64438 | not yet assigned | no | unstable is vulnerable | |
| ffmpeg | CVE-2025-69693 | not yet assigned | no | fixed in unstable |
| flask | CVE-2026-27205 | not yet assigned | no | fixed in unstable |
| fontforge | CVE-2025-15269 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-15270 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-15271 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-15272 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-15273 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-15274 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-15275 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-15276 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-15277 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-15278 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-15279 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-15280 | not yet assigned | no | unstable is vulnerable | |
| fort-validator | CVE-2024-56169 | not yet assigned | no | unstable is vulnerable |
| CVE-2024-56170 | not yet assigned | no | unstable is vulnerable | |
| freeimage | CVE-2019-12212 | not yet assigned | no | unstable is vulnerable |
| CVE-2019-12214 | not yet assigned | no | unstable is vulnerable | |
| CVE-2020-21426 | not yet assigned | no | unstable is vulnerable | |
| CVE-2020-24292 | not yet assigned | no | unstable is vulnerable | |
| CVE-2020-24293 | not yet assigned | no | unstable is vulnerable | |
| CVE-2020-24294 | not yet assigned | no | unstable is vulnerable | |
| CVE-2020-24295 | not yet assigned | no | unstable is vulnerable | |
| CVE-2021-33367 | not yet assigned | no | unstable is vulnerable | |
| CVE-2021-40262 | not yet assigned | no | unstable is vulnerable | |
| CVE-2021-40263 | not yet assigned | no | unstable is vulnerable | |
| CVE-2021-40264 | not yet assigned | no | unstable is vulnerable | |
| CVE-2021-40265 | not yet assigned | no | unstable is vulnerable | |
| CVE-2021-40266 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-47992 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-47993 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-47994 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-47995 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-47996 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-47997 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-9029 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-28562 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-28563 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-28564 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-28565 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-28566 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-28567 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-28568 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-28569 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-28570 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-28571 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-28572 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-28573 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-28574 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-28575 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-28576 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-28577 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-28578 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-28579 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-28580 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-28581 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-28582 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-28583 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-28584 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-31570 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-65803 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-70968 | not yet assigned | no | unstable is vulnerable | |
| fuse3 | CVE-2026-33150 | not yet assigned | no | fixed in unstable |
| CVE-2026-33179 | not yet assigned | no | fixed in unstable | |
| ganglia-web | CVE-2024-52762 | not yet assigned | no | unstable is vulnerable |
| CVE-2024-52763 | not yet assigned | no | unstable is vulnerable | |
| gdcm | CVE-2025-48429 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-52582 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-53618 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-53619 | not yet assigned | no | unstable is vulnerable | |
| gdm3 | CVE-2016-1000002 | low | no | unstable is vulnerable |
| giflib | CVE-2025-31344 | not yet assigned | no | unstable is vulnerable |
| CVE-2026-23868 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-26740 | not yet assigned | no | unstable is vulnerable | |
| glance | TEMP-1131274-5F0822 | not yet assigned | ? | fixed in unstable |
| glibc | CVE-2026-4437 | not yet assigned | no | unstable is vulnerable |
| CVE-2026-4438 | not yet assigned | no | unstable is vulnerable | |
| gnome-control-center | CVE-2023-5616 | not yet assigned | no | unstable is vulnerable |
| gnome-remote-desktop | CVE-2025-5024 | not yet assigned | no | unstable is vulnerable |
| gnupg2 | CVE-2025-68972 | not yet assigned | no | unstable is vulnerable |
| CVE-2026-24882 | not yet assigned | no | unstable is vulnerable | |
| gobgp | CVE-2023-46565 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-7464 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-30405 | not yet assigned | no | unstable is vulnerable | |
| golang-1.24 | CVE-2024-8244 | not yet assigned | no | unstable is vulnerable |
| CVE-2026-27139 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-27142 | not yet assigned | no | unstable is vulnerable | |
| golang-filippo-edwards25519 | CVE-2026-26958 | not yet assigned | no | fixed in unstable |
| golang-github-antonmedv-expr | CVE-2025-29786 | not yet assigned | no | unstable is vulnerable |
| golang-github-cli-go-gh | CVE-2025-48938 | not yet assigned | no | unstable is vulnerable |
| golang-github-cli-go-gh-v2 | CVE-2024-53859 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-48938 | not yet assigned | no | unstable is vulnerable | |
| golang-github-dvsekhvalnov-jose2go | CVE-2023-50658 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-63811 | not yet assigned | no | unstable is vulnerable | |
| golang-github-go-git-go-git | CVE-2026-25934 | not yet assigned | no | fixed in unstable |
| golang-github-gomarkdown-markdown | CVE-2024-44337 | not yet assigned | no | unstable is vulnerable |
| golang-github-gorilla-csrf | CVE-2025-47909 | not yet assigned | no | unstable is vulnerable |
| golang-github-hashicorp-go-retryablehttp | CVE-2024-6104 | not yet assigned | no | unstable is vulnerable |
| golang-github-jackc-pgconn | CVE-2024-27304 | not yet assigned | no | fixed in unstable |
| golang-github-jackc-pgproto3 | CVE-2026-4427 | not yet assigned | no | unstable is vulnerable |
| golang-github-pion-dtls-v3 | CVE-2026-26014 | not yet assigned | no | unstable is vulnerable |
| golang-github-pion-dtls.v2 | CVE-2026-26014 | not yet assigned | no | unstable is vulnerable |
| golang-github-sigstore-fulcio | CVE-2025-66506 | not yet assigned | no | fixed in unstable |
| CVE-2026-22772 | not yet assigned | no | fixed in unstable | |
| golang-github-theupdateframework-go-tuf | CVE-2026-23991 | not yet assigned | no | fixed in unstable |
| CVE-2026-23992 | not yet assigned | no | fixed in unstable | |
| CVE-2026-24686 | not yet assigned | no | fixed in unstable | |
| golang-github-xenolf-lego | CVE-2025-54799 | not yet assigned | no | unstable is vulnerable |
| golang-refraction-networking-utls | CVE-2026-26994 | not yet assigned | no | unstable is vulnerable |
| gradle | CVE-2019-15052 | low | no | unstable is vulnerable |
| CVE-2021-29428 | not yet assigned | no | unstable is vulnerable | |
| CVE-2021-29429 | not yet assigned | no | unstable is vulnerable | |
| CVE-2021-32751 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-35946 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-35947 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-42445 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-44387 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-22816 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-22865 | not yet assigned | no | unstable is vulnerable | |
| gradle-completion | CVE-2026-25063 | not yet assigned | no | unstable is vulnerable |
| grpc | CVE-2023-4785 | not yet assigned | no | unstable is vulnerable |
| CVE-2023-32732 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-33953 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-44487 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-7246 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-11407 | not yet assigned | no | unstable is vulnerable | |
| grub2 | CVE-2024-56738 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-54770 | not yet assigned | no | fixed in unstable | |
| CVE-2025-54771 | not yet assigned | no | fixed in unstable | |
| CVE-2025-61661 | not yet assigned | no | fixed in unstable | |
| CVE-2025-61662 | not yet assigned | no | fixed in unstable | |
| CVE-2025-61663 | not yet assigned | no | fixed in unstable | |
| CVE-2025-61664 | not yet assigned | no | fixed in unstable | |
| htslib | CVE-2026-31962 | not yet assigned | no | unstable is vulnerable |
| CVE-2026-31963 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-31964 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-31965 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-31966 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-31967 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-31968 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-31969 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-31970 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-31971 | not yet assigned | no | unstable is vulnerable | |
| imagemagick | CVE-2026-28493 | not yet assigned | no | fixed in unstable |
| CVE-2026-28494 | not yet assigned | no | fixed in unstable | |
| CVE-2026-28686 | not yet assigned | no | fixed in unstable | |
| CVE-2026-28687 | not yet assigned | no | fixed in unstable | |
| CVE-2026-28688 | not yet assigned | no | fixed in unstable | |
| CVE-2026-28689 | not yet assigned | no | fixed in unstable | |
| CVE-2026-28690 | not yet assigned | no | fixed in unstable | |
| CVE-2026-28691 | not yet assigned | no | fixed in unstable | |
| CVE-2026-28692 | not yet assigned | no | fixed in unstable | |
| CVE-2026-28693 | not yet assigned | no | fixed in unstable | |
| CVE-2026-30883 | not yet assigned | no | fixed in unstable | |
| CVE-2026-30929 | not yet assigned | no | fixed in unstable | |
| CVE-2026-30931 | not yet assigned | no | fixed in unstable | |
| CVE-2026-30935 | not yet assigned | no | fixed in unstable | |
| CVE-2026-30936 | not yet assigned | no | fixed in unstable | |
| CVE-2026-30937 | not yet assigned | no | fixed in unstable | |
| CVE-2026-31853 | not yet assigned | no | fixed in unstable | |
| CVE-2026-32259 | not yet assigned | no | fixed in unstable | |
| CVE-2026-32636 | not yet assigned | no | unstable is vulnerable | |
| incus | CVE-2026-28384 | not yet assigned | no | fixed in unstable |
| inetutils | CVE-2026-32772 | not yet assigned | no | unstable is vulnerable |
| invesalius | CVE-2024-42845 | not yet assigned | no | unstable is vulnerable |
| jabberd2 | CVE-2017-18226 | low | no | unstable is vulnerable |
| jackrabbit | CVE-2025-58782 | not yet assigned | no | unstable is vulnerable |
| jackson-core | CVE-2025-52999 | not yet assigned | no | unstable is vulnerable |
| jakarta-jmeter | CVE-2018-1287 | low | no | unstable is vulnerable |
| CVE-2018-1297 | low | no | unstable is vulnerable | |
| CVE-2019-0187 | not yet assigned | no | unstable is vulnerable | |
| jakarta-mail | CVE-2025-7962 | not yet assigned | no | unstable is vulnerable |
| javamail | CVE-2025-7962 | not yet assigned | no | unstable is vulnerable |
| jboss-xnio | CVE-2023-5685 | not yet assigned | no | unstable is vulnerable |
| jenkins-json | CVE-2023-5072 | not yet assigned | no | unstable is vulnerable |
| jetty9 | CVE-2025-11143 | not yet assigned | no | unstable is vulnerable |
| jgit | CVE-2025-4949 | not yet assigned | no | unstable is vulnerable |
| jline3 | CVE-2023-50572 | not yet assigned | no | unstable is vulnerable |
| jpeg-xl | CVE-2025-12474 | not yet assigned | no | fixed in unstable |
| CVE-2026-1837 | not yet assigned | no | fixed in unstable | |
| jtidy | CVE-2023-34623 | not yet assigned | no | unstable is vulnerable |
| jupyterlab | CVE-2025-59842 | not yet assigned | no | unstable is vulnerable |
| jython | CVE-2025-6069 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-8291 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-12084 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-15366 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-15367 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-0865 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-4519 | not yet assigned | no | unstable is vulnerable | |
| kissfft | CVE-2025-34297 | not yet assigned | no | unstable is vulnerable |
| krusader | TEMP-1108942-E3F85E | not yet assigned | ? | unstable is vulnerable |
| ldap-account-manager | CVE-2025-58174 | not yet assigned | no | unstable is vulnerable |
| CVE-2026-27894 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-27895 | not yet assigned | no | unstable is vulnerable | |
| lexbor | CVE-2026-29078 | not yet assigned | no | unstable is vulnerable |
| CVE-2026-29079 | not yet assigned | no | unstable is vulnerable | |
| libapache-poi-java | CVE-2025-31672 | not yet assigned | no | unstable is vulnerable |
| libapache-session-perl | CVE-2025-40931 | not yet assigned | no | unstable is vulnerable |
| libarchive | CVE-2026-4111 | not yet assigned | no | unstable is vulnerable |
| CVE-2026-4424 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-4426 | not yet assigned | no | unstable is vulnerable | |
| libcdio | CVE-2024-36600 | not yet assigned | no | unstable is vulnerable |
| libcoap3 | CVE-2025-34468 | not yet assigned | no | unstable is vulnerable |
| libcommons-fileupload-java | CVE-2025-48976 | not yet assigned | no | unstable is vulnerable |
| libcrypto++ | CVE-2022-48570 | not yet assigned | no | unstable is vulnerable |
| CVE-2023-50979 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-50981 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-28285 | not yet assigned | no | unstable is vulnerable | |
| libde265 | CVE-2024-38949 | not yet assigned | no | unstable is vulnerable |
| CVE-2024-38950 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-61147 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-33164 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-33165 | not yet assigned | no | unstable is vulnerable | |
| libexif | CVE-2026-32775 | not yet assigned | no | unstable is vulnerable |
| libheif | CVE-2026-3950 | not yet assigned | no | unstable is vulnerable |
| libhibernate-validator-java | CVE-2019-10219 | not yet assigned | no | unstable is vulnerable |
| CVE-2020-10693 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-1932 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-35036 | not yet assigned | no | unstable is vulnerable | |
| libhibernate-validator4-java | CVE-2025-35036 | not yet assigned | no | unstable is vulnerable |
| libjdom2-intellij-java | CVE-2021-33813 | not yet assigned | no | unstable is vulnerable |
| libjettison-java | CVE-2023-5072 | not yet assigned | no | unstable is vulnerable |
| libjs-bootbox | CVE-2023-46998 | not yet assigned | no | unstable is vulnerable |
| libjs-spin.js | CVE-2026-3884 | not yet assigned | no | unstable is vulnerable |
| libmojolicious-perl | CVE-2024-58134 | not yet assigned | no | unstable is vulnerable |
| CVE-2024-58135 | not yet assigned | no | unstable is vulnerable | |
| libnetwork-ipv4addr-perl | CVE-2021-47155 | not yet assigned | no | unstable is vulnerable |
| libowasp-antisamy-java | CVE-2024-23635 | not yet assigned | no | unstable is vulnerable |
| libowasp-esapi-java | CVE-2025-5878 | not yet assigned | no | unstable is vulnerable |
| libpdfbox-java | CVE-2021-31811 | not yet assigned | no | unstable is vulnerable |
| CVE-2021-31812 | not yet assigned | no | unstable is vulnerable | |
| libpodofo | CVE-2021-30469 | not yet assigned | no | unstable is vulnerable |
| CVE-2021-30472 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-31566 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-31567 | not yet assigned | no | unstable is vulnerable | |
| libsixel | CVE-2021-46700 | not yet assigned | no | unstable is vulnerable |
| CVE-2022-29977 | not yet assigned | no | fixed in unstable | |
| CVE-2022-29978 | not yet assigned | no | fixed in unstable | |
| CVE-2025-9300 | not yet assigned | no | fixed in unstable | |
| CVE-2025-61146 | not yet assigned | no | unstable is vulnerable | |
| libsndfile | CVE-2024-50613 | not yet assigned | no | unstable is vulnerable |
| libsoup3 | CVE-2025-4035 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-9901 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-32049 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-0719 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-2436 | not yet assigned | ? | unstable is vulnerable | |
| CVE-2026-2708 | not yet assigned | ? | unstable is vulnerable | |
| CVE-2026-3099 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-3632 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-3633 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-3634 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-4271 | not yet assigned | no | unstable is vulnerable | |
| libspf2 | CVE-2023-42118 | not yet assigned | no | unstable is vulnerable |
| libssh | CVE-2026-0964 | not yet assigned | ? | fixed in unstable |
| CVE-2026-0965 | not yet assigned | ? | fixed in unstable | |
| CVE-2026-0966 | not yet assigned | ? | fixed in unstable | |
| CVE-2026-0967 | not yet assigned | ? | fixed in unstable | |
| CVE-2026-0968 | not yet assigned | ? | fixed in unstable | |
| CVE-2026-3731 | not yet assigned | no | fixed in unstable | |
| libstb | CVE-2021-45340 | not yet assigned | no | unstable is vulnerable |
| CVE-2023-43898 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-45661 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-45662 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-45663 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-45664 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-45666 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-45667 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-45675 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-45676 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-45677 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-45678 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-45679 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-45680 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-45681 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-45682 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-47212 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-3406 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-3407 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-3408 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-3409 | not yet assigned | no | unstable is vulnerable | |
| libuvc | CVE-2026-1991 | not yet assigned | no | unstable is vulnerable |
| libweb-api-perl | CVE-2024-57868 | not yet assigned | no | unstable is vulnerable |
| libwoodstox-java | CVE-2022-40152 | not yet assigned | no | unstable is vulnerable |
| libxml-parser-perl | CVE-2006-10003 | medium | no | fixed in unstable |
| libxml-security-java | CVE-2023-44483 | not yet assigned | no | unstable is vulnerable |
| libxml2 | CVE-2026-0989 | not yet assigned | no | unstable is vulnerable |
| CVE-2026-0990 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-0992 | not yet assigned | no | unstable is vulnerable | |
| libxslt | CVE-2025-7425 | not yet assigned | no | unstable is vulnerable |
| linux | CVE-2013-7445 | not yet assigned | no | unstable is vulnerable |
| CVE-2018-12928 | low | no | unstable is vulnerable | |
| CVE-2019-15213 | not yet assigned | no | unstable is vulnerable | |
| CVE-2019-16089 | not yet assigned | no | unstable is vulnerable | |
| CVE-2019-19449 | not yet assigned | no | unstable is vulnerable | |
| CVE-2019-19814 | not yet assigned | no | unstable is vulnerable | |
| CVE-2019-20794 | not yet assigned | no | unstable is vulnerable | |
| CVE-2020-14304 | not yet assigned | no | unstable is vulnerable | |
| CVE-2020-36694 | not yet assigned | no | unstable is vulnerable | |
| CVE-2021-3847 | not yet assigned | no | unstable is vulnerable | |
| CVE-2021-3864 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-3397 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-4010 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-6238 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-6240 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-31082 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-37454 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-2193 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-21803 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-24864 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-56709 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-23274 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-23275 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-23276 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-23277 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-23278 | not yet assigned | no | unstable is vulnerable | |
| lmdb | CVE-2026-22185 | not yet assigned | no | unstable is vulnerable |
| logback | CVE-2024-12798 | not yet assigned | no | unstable is vulnerable |
| CVE-2024-12801 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-1225 | not yet assigned | no | unstable is vulnerable | |
| lz4-java | CVE-2025-12183 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-66566 | not yet assigned | no | unstable is vulnerable | |
| mapnik | CVE-2025-15537 | not yet assigned | no | unstable is vulnerable |
| miniaudio | CVE-2026-32837 | not yet assigned | no | unstable is vulnerable |
| mruby | CVE-2025-13120 | not yet assigned | no | unstable is vulnerable |
| CVE-2026-1979 | not yet assigned | no | unstable is vulnerable | |
| msgpack-java | CVE-2026-21452 | not yet assigned | no | unstable is vulnerable |
| nasm | CVE-2025-8845 | not yet assigned | no | unstable is vulnerable |
| ncurses | CVE-2025-69720 | not yet assigned | no | unstable is vulnerable |
| netcdf | CVE-2025-14932 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-14933 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-14934 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-14935 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-14936 | not yet assigned | no | unstable is vulnerable | |
| netcdf-parallel | CVE-2025-14932 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-14933 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-14934 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-14935 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-14936 | not yet assigned | no | unstable is vulnerable | |
| netsurf | CVE-2024-51317 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-29699 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-45663 | not yet assigned | no | unstable is vulnerable | |
| nghttp2 | CVE-2026-27135 | not yet assigned | no | unstable is vulnerable |
| nginx | CVE-2013-0337 | low | no | unstable is vulnerable |
| nix | CVE-2024-36050 | not yet assigned | no | unstable is vulnerable |
| nltk | CVE-2026-33230 | not yet assigned | no | unstable is vulnerable |
| CVE-2026-33231 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-33236 | not yet assigned | no | unstable is vulnerable | |
| node-ajv | CVE-2025-69873 | not yet assigned | no | unstable is vulnerable |
| node-axios | CVE-2026-25639 | not yet assigned | no | unstable is vulnerable |
| node-brace-expansion | CVE-2026-25547 | not yet assigned | no | unstable is vulnerable |
| node-diff | CVE-2026-24001 | not yet assigned | no | unstable is vulnerable |
| node-elliptic | CVE-2025-14505 | not yet assigned | no | unstable is vulnerable |
| node-flatted | CVE-2026-33228 | not yet assigned | no | unstable is vulnerable |
| node-formidable | CVE-2025-46653 | not yet assigned | no | unstable is vulnerable |
| node-ip | CVE-2025-59436 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-59437 | not yet assigned | no | unstable is vulnerable | |
| node-katex | CVE-2025-23207 | not yet assigned | no | unstable is vulnerable |
| node-minimatch | CVE-2026-26996 | not yet assigned | no | unstable is vulnerable |
| CVE-2026-27903 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-27904 | not yet assigned | no | unstable is vulnerable | |
| node-qs | CVE-2026-2391 | not yet assigned | no | unstable is vulnerable |
| node-socket.io-parser | CVE-2026-33151 | not yet assigned | no | unstable is vulnerable |
| node-static | CVE-2025-11149 | not yet assigned | no | unstable is vulnerable |
| node-undici | CVE-2025-23167 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-47279 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-1525 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-1526 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-1527 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-1528 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-2229 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-2581 | not yet assigned | no | unstable is vulnerable | |
| node-webpack | CVE-2025-68157 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-68458 | not yet assigned | no | unstable is vulnerable | |
| node-yarnpkg | CVE-2025-8262 | not yet assigned | no | unstable is vulnerable |
| nvidia-cuda-toolkit (non-free) | CVE-2024-0102 | not yet assigned | no | unstable is vulnerable |
| CVE-2024-0109 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-0110 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-0111 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-0123 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-0124 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-23247 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-23248 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-23255 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-23271 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-23272 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-23273 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-23274 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-23275 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-23308 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-23338 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-23339 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-23340 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-23346 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-33228 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-33229 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-33230 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-33231 | not yet assigned | no | unstable is vulnerable | |
| nvidia-graphics-drivers (non-free-firmware) | CVE-2025-23279 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-23280 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-23282 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-23286 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-23300 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-23330 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-23332 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-23345 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-33219 | not yet assigned | no | unstable is vulnerable | |
| nvidia-graphics-drivers-tesla-535 (non-free-firmware) | CVE-2025-33219 | not yet assigned | no | unstable is vulnerable |
| nvidia-open-gpu-kernel-modules (contrib) | CVE-2025-23279 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-23280 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-23282 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-23286 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-23300 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-23330 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-23332 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-23345 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-33219 | not yet assigned | no | unstable is vulnerable | |
| ocaml | CVE-2026-28364 | not yet assigned | no | unstable is vulnerable |
| oggvideotools | CVE-2020-21724 | not yet assigned | no | unstable is vulnerable |
| ognl | CVE-2025-53192 | not yet assigned | no | unstable is vulnerable |
| olm | CVE-2024-45191 | not yet assigned | no | unstable is vulnerable |
| CVE-2024-45192 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-45193 | not yet assigned | no | unstable is vulnerable | |
| onnx | CVE-2026-28500 | not yet assigned | no | unstable is vulnerable |
| openbabel | CVE-2022-37331 | not yet assigned | no | unstable is vulnerable |
| CVE-2022-41793 | not yet assigned | no | unstable is vulnerable | |
| CVE-2022-42885 | not yet assigned | no | unstable is vulnerable | |
| CVE-2022-43467 | not yet assigned | no | unstable is vulnerable | |
| CVE-2022-43607 | not yet assigned | no | unstable is vulnerable | |
| CVE-2022-44451 | not yet assigned | no | unstable is vulnerable | |
| CVE-2022-46280 | not yet assigned | no | unstable is vulnerable | |
| CVE-2022-46289 | not yet assigned | no | unstable is vulnerable | |
| CVE-2022-46290 | not yet assigned | no | unstable is vulnerable | |
| CVE-2022-46291 | not yet assigned | no | unstable is vulnerable | |
| CVE-2022-46292 | not yet assigned | no | unstable is vulnerable | |
| CVE-2022-46293 | not yet assigned | no | unstable is vulnerable | |
| CVE-2022-46294 | not yet assigned | no | unstable is vulnerable | |
| CVE-2022-46295 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-10994 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-10995 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-10996 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-10997 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-10998 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-10999 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-11000 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-2704 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-2705 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-3408 | not yet assigned | no | unstable is vulnerable | |
| opencolorio | CVE-2025-15506 | not yet assigned | no | unstable is vulnerable |
| opencryptoki | CVE-2026-23893 | not yet assigned | no | unstable is vulnerable |
| opendoas | CVE-2023-28339 | not yet assigned | no | unstable is vulnerable |
| openexr | CVE-2025-12495 | not yet assigned | no | fixed in unstable |
| CVE-2025-12839 | not yet assigned | no | fixed in unstable | |
| CVE-2025-12840 | not yet assigned | no | fixed in unstable | |
| CVE-2025-48074 | not yet assigned | no | fixed in unstable | |
| CVE-2025-64181 | not yet assigned | no | fixed in unstable | |
| CVE-2026-27622 | not yet assigned | no | fixed in unstable | |
| openimageio | CVE-2024-55192 | not yet assigned | no | unstable is vulnerable |
| CVE-2024-55193 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-55194 | not yet assigned | no | unstable is vulnerable | |
| openjpeg2 | CVE-2019-6988 | low | no | unstable is vulnerable |
| CVE-2023-39327 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-39328 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-39329 | not yet assigned | no | unstable is vulnerable | |
| openssh | CVE-2026-3497 | not yet assigned | no | unstable is vulnerable |
| openssl | CVE-2026-2673 | not yet assigned | no | unstable is vulnerable |
| openvswitch | CVE-2019-25076 | not yet assigned | no | unstable is vulnerable |
| ormar | CVE-2026-27953 | not yet assigned | no | unstable is vulnerable |
| php-phpseclib | CVE-2026-32935 | not yet assigned | no | unstable is vulnerable |
| php-phpseclib3 | CVE-2026-32935 | not yet assigned | no | unstable is vulnerable |
| plantuml | CVE-2023-3431 | not yet assigned | no | unstable is vulnerable |
| CVE-2023-3432 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-0858 | not yet assigned | no | unstable is vulnerable | |
| poppler | CVE-2019-9543 | low | no | unstable is vulnerable |
| CVE-2019-9545 | low | no | unstable is vulnerable | |
| protobuf | CVE-2026-0994 | not yet assigned | no | unstable is vulnerable |
| proxychains-ng | CVE-2025-34451 | not yet assigned | no | unstable is vulnerable |
| psd-tools | CVE-2026-27809 | not yet assigned | no | unstable is vulnerable |
| pspp | CVE-2025-5898 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-5899 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-47814 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-47815 | not yet assigned | no | unstable is vulnerable | |
| py-lmdb | CVE-2019-16224 | not yet assigned | no | unstable is vulnerable |
| CVE-2019-16225 | not yet assigned | no | unstable is vulnerable | |
| CVE-2019-16226 | not yet assigned | no | unstable is vulnerable | |
| CVE-2019-16227 | not yet assigned | no | unstable is vulnerable | |
| CVE-2019-16228 | not yet assigned | no | unstable is vulnerable | |
| pyasn1 | CVE-2026-30922 | not yet assigned | no | fixed in unstable |
| pydicom | CVE-2026-32711 | not yet assigned | no | unstable is vulnerable |
| pyjwt | CVE-2026-32597 | not yet assigned | no | unstable is vulnerable |
| pypdf | CVE-2026-33123 | not yet assigned | no | unstable is vulnerable |
| pypy3 | CVE-2025-6069 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-6075 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-8194 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-8291 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-11468 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-12084 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-12781 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-13836 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-13837 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-15282 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-15366 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-15367 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-69534 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-0672 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-0865 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-1299 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-2297 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-3479 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-4224 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-4519 | not yet assigned | no | unstable is vulnerable | |
| python-biopython | CVE-2025-68463 | not yet assigned | no | unstable is vulnerable |
| python-dynaconf | CVE-2026-33154 | not yet assigned | no | unstable is vulnerable |
| python-kdcproxy | CVE-2025-59088 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-59089 | not yet assigned | no | unstable is vulnerable | |
| python-marshmallow | CVE-2025-68480 | not yet assigned | no | unstable is vulnerable |
| python-tornado | CVE-2026-31958 | not yet assigned | no | unstable is vulnerable |
| python-xmltodict | CVE-2025-9375 | not yet assigned | no | unstable is vulnerable |
| python3.13 | CVE-2025-12781 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-13462 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-15366 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-15367 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-2297 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-3479 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-3644 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-4224 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-4519 | not yet assigned | no | unstable is vulnerable | |
| python3.14 | CVE-2025-12781 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-13462 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-15366 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-15367 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-2297 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-3479 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-3644 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-4224 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-4519 | not yet assigned | no | unstable is vulnerable | |
| pytorch | CVE-2025-2148 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-2149 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-2953 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-2998 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-2999 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-3000 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-3001 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-3121 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-3136 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-3730 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-4287 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-46148 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-46149 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-46150 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-46152 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-46153 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-55551 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-55552 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-55553 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-55554 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-55557 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-55558 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-55560 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-63396 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-24747 | not yet assigned | no | unstable is vulnerable | |
| qemu | CVE-2019-12067 | low | no | unstable is vulnerable |
| CVE-2020-25741 | not yet assigned | no | unstable is vulnerable | |
| CVE-2020-25742 | not yet assigned | no | unstable is vulnerable | |
| CVE-2020-25743 | not yet assigned | no | unstable is vulnerable | |
| CVE-2020-35503 | not yet assigned | no | unstable is vulnerable | |
| CVE-2021-3735 | not yet assigned | no | unstable is vulnerable | |
| CVE-2022-3872 | not yet assigned | no | unstable is vulnerable | |
| CVE-2023-1386 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-6519 | not yet assigned | no | unstable is vulnerable | |
| CVE-2024-8612 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-2243 | not yet assigned | no | fixed in unstable | |
| CVE-2026-3195 | not yet assigned | ? | fixed in unstable | |
| CVE-2026-3196 | not yet assigned | ? | fixed in unstable | |
| CVE-2026-3842 | not yet assigned | ? | fixed in unstable | |
| qt6-declarative | CVE-2025-12385 | not yet assigned | no | unstable is vulnerable |
| qt6-svg | CVE-2025-10729 | not yet assigned | no | unstable is vulnerable |
| qtdeclarative-opensource-src-gles | CVE-2025-12385 | not yet assigned | no | unstable is vulnerable |
| qtsvg-opensource-src | CVE-2025-10729 | not yet assigned | no | unstable is vulnerable |
| quickjs | CVE-2024-13903 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-12745 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-62490 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-62491 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-62492 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-62493 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-62494 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-62495 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-62496 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-69653 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-69654 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-0821 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-0822 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-1144 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-1145 | not yet assigned | no | unstable is vulnerable | |
| rapidjson | CVE-2024-39684 | not yet assigned | no | unstable is vulnerable |
| rbenv | CVE-2017-1000047 | not yet assigned | no | unstable is vulnerable |
| redict | CVE-2025-67733 | not yet assigned | no | unstable is vulnerable |
| CVE-2026-21863 | not yet assigned | no | unstable is vulnerable | |
| redis | CVE-2025-67733 | not yet assigned | no | unstable is vulnerable |
| CVE-2026-21863 | not yet assigned | no | unstable is vulnerable | |
| resteasy3.0 | CVE-2020-25633 | not yet assigned | no | unstable is vulnerable |
| CVE-2023-0482 | not yet assigned | no | unstable is vulnerable | |
| rhino | CVE-2025-66453 | not yet assigned | no | unstable is vulnerable |
| robocode | CVE-2025-14306 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-14307 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-14308 | not yet assigned | no | unstable is vulnerable | |
| roundcube | TEMP-1131182-2BBEF7 | not yet assigned | ? | fixed in unstable |
| TEMP-1131182-70C2AD | not yet assigned | ? | fixed in unstable | |
| TEMP-1131182-79F7AC | not yet assigned | ? | fixed in unstable | |
| TEMP-1131182-88010C | not yet assigned | ? | fixed in unstable | |
| TEMP-1131182-329769 | not yet assigned | ? | fixed in unstable | |
| TEMP-1131182-408014 | not yet assigned | ? | fixed in unstable | |
| TEMP-1131182-B1EAD2 | not yet assigned | ? | fixed in unstable | |
| TEMP-1131182-D0A1D2 | not yet assigned | ? | fixed in unstable | |
| ruby-json | CVE-2026-33210 | not yet assigned | no | unstable is vulnerable |
| ruby-rack | CVE-2026-22860 | not yet assigned | no | fixed in unstable |
| CVE-2026-25500 | not yet assigned | no | fixed in unstable | |
| ruby3.3 | CVE-2025-24294 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-43857 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-58767 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-61594 | not yet assigned | no | unstable is vulnerable | |
| rubygems | CVE-2025-61594 | not yet assigned | no | unstable is vulnerable |
| rust-astral-tokio-tar | CVE-2026-32766 | not yet assigned | no | unstable is vulnerable |
| rust-capnp | TEMP-0000000-63C355 | not yet assigned | ? | unstable is vulnerable |
| rust-gix-date | CVE-2026-0810 | not yet assigned | no | unstable is vulnerable |
| rust-jsonwebtoken | CVE-2026-25537 | not yet assigned | no | unstable is vulnerable |
| rust-maxminddb | TEMP-1122195-D08402 | not yet assigned | ? | unstable is vulnerable |
| rust-oneshot | TEMP-0000000-CF89FB | not yet assigned | ? | unstable is vulnerable |
| rust-pleaser | CVE-2023-46277 | not yet assigned | no | unstable is vulnerable |
| rust-pyo3 | TEMP-0000000-E3BADF | not yet assigned | ? | unstable is vulnerable |
| rust-rpm-sequoia | CVE-2026-2625 | not yet assigned | ? | unstable is vulnerable |
| rust-rsa | CVE-2023-49092 | not yet assigned | no | unstable is vulnerable |
| rust-tar | CVE-2026-33055 | not yet assigned | no | unstable is vulnerable |
| CVE-2026-33056 | not yet assigned | no | unstable is vulnerable | |
| rust-wasmtime | CVE-2025-53901 | not yet assigned | no | unstable is vulnerable |
| CVE-2026-24116 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-27204 | not yet assigned | no | fixed in unstable | |
| CVE-2026-27572 | not yet assigned | no | fixed in unstable | |
| sail | CVE-2026-27168 | not yet assigned | no | unstable is vulnerable |
| samtools | CVE-2026-31972 | not yet assigned | no | unstable is vulnerable |
| CVE-2026-31973 | not yet assigned | no | unstable is vulnerable | |
| setuptools | CVE-2026-23949 | not yet assigned | no | unstable is vulnerable |
| shadow | CVE-2024-56433 | not yet assigned | no | unstable is vulnerable |
| simpleeval | CVE-2026-32640 | not yet assigned | no | unstable is vulnerable |
| skanpage | CVE-2025-55174 | not yet assigned | no | unstable is vulnerable |
| slic3r-prusa | CVE-2020-28594 | not yet assigned | no | unstable is vulnerable |
| CVE-2020-28595 | not yet assigned | no | unstable is vulnerable | |
| CVE-2020-28596 | not yet assigned | no | unstable is vulnerable | |
| CVE-2020-28598 | not yet assigned | no | unstable is vulnerable | |
| smartdns | CVE-2026-1425 | not yet assigned | no | unstable is vulnerable |
| snapd | CVE-2026-3888 | not yet assigned | no | unstable is vulnerable |
| social-auth-app-django | CVE-2025-61783 | not yet assigned | no | unstable is vulnerable |
| sogo | CVE-2026-3054 | not yet assigned | no | unstable is vulnerable |
| TEMP-0000000-63A6CA | not yet assigned | ? | unstable is vulnerable | |
| TEMP-0000000-A1F0C0 | not yet assigned | ? | unstable is vulnerable | |
| spip | CVE-2023-53900 | not yet assigned | no | unstable is vulnerable |
| squirrel3 | CVE-2021-41556 | not yet assigned | no | unstable is vulnerable |
| CVE-2026-2659 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-2661 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-3388 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-3389 | not yet assigned | no | unstable is vulnerable | |
| sslh | CVE-2025-46806 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-46807 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-52936 | not yet assigned | no | unstable is vulnerable | |
| steghide | CVE-2021-27211 | not yet assigned | no | unstable is vulnerable |
| tcpflow | CVE-2026-25061 | not yet assigned | no | unstable is vulnerable |
| teeworlds | CVE-2023-31517 | not yet assigned | no | unstable is vulnerable |
| CVE-2023-31518 | not yet assigned | no | unstable is vulnerable | |
| tensorflow | CVE-2025-55556 | not yet assigned | no | unstable is vulnerable |
| CVE-2026-2492 | not yet assigned | no | unstable is vulnerable | |
| tidy-html5 | CVE-2025-6496 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-6497 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-6498 | not yet assigned | no | unstable is vulnerable | |
| tinyxml2 | CVE-2024-50614 | not yet assigned | no | unstable is vulnerable |
| trilead-ssh2 | CVE-2023-48795 | not yet assigned | no | unstable is vulnerable |
| u-boot | CVE-2024-42040 | not yet assigned | no | unstable is vulnerable |
| ujson | CVE-2026-32874 | not yet assigned | no | unstable is vulnerable |
| CVE-2026-32875 | not yet assigned | no | unstable is vulnerable | |
| undertow | CVE-2024-3884 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-12543 | not yet assigned | no | unstable is vulnerable | |
| uriparser | CVE-2025-67899 | not yet assigned | no | unstable is vulnerable |
| util-linux | CVE-2026-3184 | not yet assigned | ? | unstable is vulnerable |
| valkey | CVE-2025-67733 | not yet assigned | no | unstable is vulnerable |
| CVE-2026-21863 | not yet assigned | no | unstable is vulnerable | |
| vega.js | CVE-2025-26619 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-27793 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-59840 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-65110 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-66648 | not yet assigned | no | unstable is vulnerable | |
| vim | CVE-2026-26269 | not yet assigned | no | fixed in unstable |
| CVE-2026-28417 | not yet assigned | no | fixed in unstable | |
| CVE-2026-28418 | not yet assigned | no | fixed in unstable | |
| CVE-2026-28419 | not yet assigned | no | fixed in unstable | |
| CVE-2026-28420 | not yet assigned | no | fixed in unstable | |
| CVE-2026-28421 | not yet assigned | no | fixed in unstable | |
| CVE-2026-33412 | not yet assigned | ? | fixed in unstable | |
| vtk9 | CVE-2025-57106 | not yet assigned | no | unstable is vulnerable |
| CVE-2025-57107 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-57108 | not yet assigned | no | unstable is vulnerable | |
| CVE-2025-57109 | not yet assigned | no | unstable is vulnerable | |
| wabt | CVE-2023-46332 | not yet assigned | no | unstable is vulnerable |
| webkit2gtk | CVE-2025-46299 | not yet assigned | no | unstable is vulnerable |
| wget | CVE-2021-31879 | not yet assigned | no | unstable is vulnerable |
| wlc | CVE-2026-22250 | not yet assigned | no | unstable is vulnerable |
| CVE-2026-22251 | not yet assigned | no | unstable is vulnerable | |
| CVE-2026-23535 | not yet assigned | no | unstable is vulnerable | |
| wolfssl | CVE-2026-0819 | not yet assigned | no | fixed in unstable |
| CVE-2026-1005 | not yet assigned | no | fixed in unstable | |
| CVE-2026-2645 | not yet assigned | no | fixed in unstable | |
| CVE-2026-2646 | not yet assigned | no | fixed in unstable | |
| CVE-2026-3229 | not yet assigned | no | fixed in unstable | |
| CVE-2026-3230 | not yet assigned | no | fixed in unstable | |
| CVE-2026-3503 | not yet assigned | no | fixed in unstable | |
| CVE-2026-3547 | not yet assigned | no | fixed in unstable | |
| CVE-2026-3548 | not yet assigned | no | fixed in unstable | |
| CVE-2026-3549 | not yet assigned | no | fixed in unstable | |
| CVE-2026-3579 | not yet assigned | no | fixed in unstable | |
| CVE-2026-3580 | not yet assigned | no | fixed in unstable | |
| CVE-2026-3849 | not yet assigned | no | fixed in unstable | |
| CVE-2026-4159 | not yet assigned | no | fixed in unstable | |
| CVE-2026-4395 | not yet assigned | no | fixed in unstable | |
| wordpress | CVE-2022-3590 | not yet assigned | no | unstable is vulnerable |
| CVE-2026-3906 | not yet assigned | no | fixed in unstable | |
| wpewebkit | CVE-2025-46299 | not yet assigned | no | unstable is vulnerable |
| xdg-utils | CVE-2020-27748 | not yet assigned | no | unstable is vulnerable |
| CVE-2022-4055 | not yet assigned | no | unstable is vulnerable | |
| xen | CVE-2026-23554 | not yet assigned | ? | unstable is vulnerable |
| xorg-server | CVE-2023-5574 | not yet assigned | no | unstable is vulnerable |
| zlib | CVE-2026-27171 | not yet assigned | no | unstable is vulnerable |
If a "**" is included, the urgency field was automatically assigned by the NVD (National Vulnerability Database). Note that this rating is automatically derived from a set of known factors about the issue (such as access complexity, confidentiality impact, exploitability, remediation level, and others). Human intervention is involved in determining the values of these factors, but the rating itself comes from a fully automated formula.