This page lists packages that may or may not be affected by known issues. This means that some additional work needs to be done to determined whether the package is actually vulnerable or not. This list is a good area for new contributors to make quick and meaningful contributions.
| Package | Bug | Description | Releases |
|---|---|---|---|
| adplug | CVE-2026-110875 | AdPlug through 2.4 contains a heap-based buffer overflow in CksmPlayer ... | bookworm, forky, sid, trixie |
| CVE-2026-110876 | AdPlug through 2.4 contains an out-of-bounds read vulnerability in src ... | bookworm, forky, sid, trixie | |
| CVE-2026-110877 | AdPlug through 2.4 contains a heap out-of-bounds read vulnerability in ... | bookworm, forky, sid, trixie | |
| angular.js | CVE-2026-27970 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie |
| CVE-2026-32635 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| CVE-2026-41423 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| CVE-2026-46417 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| CVE-2026-50168 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| CVE-2026-50169 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| CVE-2026-50170 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| CVE-2026-50171 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| CVE-2026-50184 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| CVE-2026-50555 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| CVE-2026-50556 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| CVE-2026-50557 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| CVE-2026-52725 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| CVE-2026-54264 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| CVE-2026-54265 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| CVE-2026-54266 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| CVE-2026-54267 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| CVE-2026-54268 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| antiword | CVE-2026-111677 | Antiword through 0.37 contains a heap out-of-bounds read vulnerability ... | bookworm, forky, sid, trixie |
| CVE-2026-111678 | Antiword through 0.37 contains a stack out-of-bounds read vulnerabilit ... | bookworm, forky, sid, trixie | |
| antlr4 | CVE-2026-13500 | A weakness has been identified in antlr ANTLR4 up to 4.13.2. Affected ... | bookworm, forky, sid, trixie |
| CVE-2026-13501 | A security vulnerability has been detected in antlr ANTLR4 up to 4.13. ... | bookworm, forky, sid, trixie | |
| CVE-2026-13502 | A flaw has been found in antlr ANTLR4 up to 4.13.2. This affects the f ... | bookworm, forky, sid, trixie | |
| CVE-2026-13503 | A vulnerability was detected in antlr ANTLR4 up to 4.13.2. Affected by ... | bookworm, forky, sid, trixie | |
| apt-cacher-ng | CVE-2025-11147 | Reflected cross-site scripting (XSS) in Apt-Cacher-NG v3.2.1. The vuln ... | bookworm, forky, sid, trixie |
| assimp | CVE-2026-108573 | A vulnerability was detected in Open Asset Import Library Assimp up to ... | bookworm, forky, sid, trixie |
| CVE-2026-111128 | Assimp through 6.0.5 contains a NULL pointer dereference vulnerability ... | bookworm, forky, sid, trixie | |
| CVE-2026-111129 | Open Asset Import Library (assimp) through 6.0.5 contains a NULL point ... | bookworm, forky, sid, trixie | |
| c3p0 | CVE-2026-55223 | c3p0 is a JDBC Connection pooling library. In versions prior to 0.14.0 ... | bookworm, forky, sid, trixie |
| caddy | CVE-2026-92284 | Caddy is an extensible server platform that uses TLS by default. In ve ... | bookworm, forky, sid, trixie |
| CVE-2026-92700 | Caddy is an extensible server platform that uses TLS by default. In ve ... | bookworm, forky, sid, trixie | |
| catdoc | CVE-2026-111126 | catdoc through 0.95 contains an out-of-bounds read vulnerability in th ... | bookworm, forky, sid, trixie |
| CVE-2026-111127 | catdoc through 0.95 contains an out-of-bounds read vulnerability in co ... | bookworm, forky, sid, trixie | |
| cfitsio | CVE-2026-111124 | CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnera ... | bookworm, forky, sid, trixie |
| CVE-2026-111125 | CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnera ... | bookworm, forky, sid, trixie | |
| commons-httpclient | CVE-2026-64607 | HttpClient based on the classic i/o model fails to correctly release t ... | bookworm, forky, sid, trixie |
| fastdds | CVE-2025-67108 | eProsima Fast-DDS v3.3 was discovered to contain improper validation f ... | bookworm, sid, trixie |
| ffmpeg | CVE-2025-52290 | A NULL pointer dereference in the avpriv_h264_has_num_reorder_frames f ... | bookworm, forky, sid, trixie |
| fluidsynth | CVE-2026-111123 | FluidSynth through 2.6.1 contains an out-of-bounds write vulnerability ... | bookworm, forky, sid, trixie |
| game-music-emu | CVE-2026-111152 | Game Music Emu (libgme) through 0.6.5 contains a heap out-of-bounds re ... | bookworm, forky, sid, trixie |
| CVE-2026-111153 | Game Music Emu (libgme) through 0.6.5 contains a global out-of-bounds ... | bookworm, forky, sid, trixie | |
| httpcomponents-client | CVE-2026-64607 | HttpClient based on the classic i/o model fails to correctly release t ... | bookworm, forky, sid, trixie |
| icingaweb2 | CVE-2022-50942 | Incinga Web 2.8.2 contains a client-side cross-site scripting vulnerab ... | bookworm, forky, sid, trixie |
| janus | CVE-2026-110717 | Janus WebRTC Server through 1.4.3 contains a path traversal vulnerabil ... | bookworm, forky, sid |
| jline | CVE-2026-56740 | JLine is a Java library for handling console input. Prior to 3.30.14, ... | bookworm, forky, sid, trixie |
| CVE-2026-56741 | JLine is a Java library for handling console input. Prior to 3.30.14, ... | bookworm, forky, sid, trixie | |
| jline2 | CVE-2026-56740 | JLine is a Java library for handling console input. Prior to 3.30.14, ... | bookworm, forky, sid, trixie |
| CVE-2026-56741 | JLine is a Java library for handling console input. Prior to 3.30.14, ... | bookworm, forky, sid, trixie | |
| kgb-bot | CVE-2015-1554 | kgb-bot 1.33-2 allows remote attackers to cause a denial of service (c ... | bookworm, forky, sid, trixie |
| libansilove | CVE-2026-111143 | Ansilove libansilove through 1.4.2 contains an out-of-bounds read vuln ... | bookworm, forky, sid, trixie |
| CVE-2026-111144 | libansilove 1.3.0 through 1.4.2 contains a NULL pointer dereference vu ... | bookworm, forky, sid, trixie | |
| libbluray | CVE-2026-112282 | VideoLAN libbluray through 1.5.1 contains an out-of-bounds read vulner ... | bookworm, forky, sid, trixie |
| CVE-2026-112283 | VideoLAN libbluray through 1.5.1 contains an uncontrolled memory alloc ... | bookworm, forky, sid, trixie | |
| libdvdnav | CVE-2026-112057 | libdvdnav before 7.0.0 contains a heap out-of-bounds read vulnerabilit ... | bookworm, forky, sid, trixie |
| CVE-2026-112058 | VideoLAN libdvdnav through 7.0.0 contains an out-of-bounds read vulner ... | bookworm, forky, sid, trixie | |
| libesedb | CVE-2026-111147 | Libyal libesedb through 20260704 contains a heap out-of-bounds read vu ... | bookworm, forky, sid, trixie |
| libewf | CVE-2026-111159 | libewf through 20260924 contains a heap out-of-bounds read vulnerabili ... | bookworm, forky, sid, trixie |
| libfsapfs | CVE-2026-111133 | libfsapfs through 20260921 contains an integer underflow in libfsapfs_ ... | bookworm, forky, sid, trixie |
| libfwsi | CVE-2026-111134 | libfwsi through 20260522 contains a heap out-of-bounds read vulnerabil ... | bookworm, forky, sid, trixie |
| CVE-2026-111135 | libfwsi through 20260522 contains a heap out-of-bounds read vulnerabil ... | bookworm, forky, sid, trixie | |
| libgxps | CVE-2026-111132 | GNOME libgxps through 0.3.2 contains a heap out-of-bounds read in path ... | bookworm, forky, sid, trixie |
| libical3 | CVE-2026-111269 | libical through 4.0.6 contains a heap-based out-of-bounds read in ical ... | bookworm, forky, sid, trixie |
| libimobiledevice | CVE-2026-116258 | A vulnerability was identified in libimobiledevice up to 1.4.0. This a ... | bookworm, forky, sid, trixie |
| CVE-2026-116259 | A security flaw has been discovered in libimobiledevice up to 1.4.0. T ... | bookworm, forky, sid, trixie | |
| CVE-2026-116260 | A weakness has been identified in libimobiledevice up to 1.4.0. This i ... | bookworm, forky, sid, trixie | |
| CVE-2026-116261 | A security vulnerability has been detected in libimobiledevice up to 1 ... | bookworm, forky, sid, trixie | |
| CVE-2026-116262 | A vulnerability was detected in libimobiledevice up to 1.4.0. The affe ... | bookworm, forky, sid, trixie | |
| libmng | CVE-2026-112008 | libmng through 2.0.3 contains a heap-based buffer overflow vulnerabili ... | bookworm, forky, sid, trixie |
| libmodplug | CVE-2026-108577 | A vulnerability was determined in Konstanty Bialkowski libmodplug up t ... | bookworm, forky, sid, trixie |
| CVE-2026-111270 | libmodplug through 0.8.9.1 contains a heap-based out-of-bounds write i ... | bookworm, forky, sid, trixie | |
| CVE-2026-111271 | libmodplug through 0.8.9.1 contains a heap-based out-of-bounds read vu ... | bookworm, forky, sid, trixie | |
| libpff | CVE-2026-110598 | Libyal libpff through 20260926 contains an integer underflow in libpff ... | bookworm, forky, sid, trixie |
| libraw | CVE-2026-111272 | LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibR ... | bookworm, forky, sid, trixie |
| libregf | CVE-2026-111140 | libregf through 20260526 contains a heap out-of-bounds read in libregf ... | bookworm, forky, sid, trixie |
| libsmb2 | CVE-2026-110712 | libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability i ... | forky, sid, trixie |
| CVE-2026-110713 | libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability i ... | forky, sid, trixie | |
| CVE-2026-110714 | libsmb2 through 6.2 contains an integer underflow vulnerability in dec ... | forky, sid, trixie | |
| libsmi | CVE-2026-111137 | libsmi through 0.5.0 contains an out-of-bounds write vulnerability in ... | bookworm, forky, sid, trixie |
| libstrophe | CVE-2026-112063 | libstrophe through 0.14.0 contains a stack-based buffer overflow vulne ... | bookworm, forky, sid, trixie |
| libtins | CVE-2026-112273 | libtins through 4.6 contains a heap out-of-bounds read vulnerability i ... | bookworm, forky, sid, trixie |
| CVE-2026-112274 | libtins through 4.6 contains an out-of-bounds read vulnerability in DN ... | bookworm, forky, sid, trixie | |
| libxmp | CVE-2026-111131 | libxmp through 4.7.4 contains an off-by-one stack out-of-bounds read v ... | bookworm, forky, sid, trixie |
| libytnef | CVE-2026-111145 | ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability i ... | bookworm, forky, sid, trixie |
| CVE-2026-111146 | ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability i ... | bookworm, forky, sid, trixie | |
| linux | CVE-2020-0347 | In iptables, there is a possible out of bounds write due to an incorre ... | bookworm, forky, sid, trixie |
| llama.cpp | CVE-2026-43627 | llama.cpp builds b1283 through b9058 contain an integer overflow vulne ... | forky, sid |
| CVE-2026-43628 | llama.cpp builds b3978 through b9058 contain an integer underflow and ... | forky, sid | |
| CVE-2026-43629 | llama.cpp builds b4882 through b9058 contain a heap buffer overflow vu ... | forky, sid | |
| CVE-2026-43631 | llama.cpp builds b7492 through the latest b9060 contains a use-after-f ... | forky, sid | |
| CVE-2026-43632 | llama.cpp builds b7492 through the latest b9060 contains a use-after-f ... | forky, sid | |
| CVE-2026-52130 | llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in ... | forky, sid | |
| CVE-2026-52131 | llama.cpp b5693 and before has a Reachable Assertion via the gguf_read ... | forky, sid | |
| CVE-2026-52132 | llama.cpp through commit 97f06e9, when started with the --reranking fl ... | forky, sid | |
| miniupnpc | CVE-2026-110655 | miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vu ... | bookworm, forky, sid, trixie |
| CVE-2026-110656 | miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vu ... | bookworm, forky, sid, trixie | |
| mycli | CVE-2026-116053 | A weakness has been identified in dbcli mycli up to 2.29.4/2.30.1. The ... | bookworm, forky, sid, trixie |
| netpbm-free | CVE-2026-112275 | Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerabil ... | bookworm, forky, sid, trixie |
| CVE-2026-112276 | Netpbm through 11.16.00 contains a heap out-of-bounds read vulnerabili ... | bookworm, forky, sid, trixie | |
| openjph | CVE-2026-111151 | OpenJPH through 0.32.0 contains a heap out-of-bounds write vulnerabili ... | bookworm, forky, sid, trixie |
| openslide | CVE-2026-111130 | OpenSlide through 4.0.1 contains a heap out-of-bounds read vulnerabili ... | bookworm, forky, sid, trixie |
| openssh | CVE-2026-110928 | bookworm, forky, sid, trixie | |
| openvpn3-client | CVE-2026-106017 | Improper certificate validation in the OpenVPN 3 Core library version ... | forky, sid, trixie |
| openvswitch | CVE-2026-36499 | A missing upper-bound check in the udpif_set_threads() function of Ope ... | bookworm, forky, sid, trixie |
| pam | CVE-2025-8941 | A flaw was found in linux-pam. The pam_namespace module may improperly ... | bookworm, forky, sid, trixie |
| phpmyadmin | CVE-2026-119561 | phpMyAdmin through 5.2.3 contains an authentication bypass vulnerabili ... | bookworm, forky, sid, trixie |
| CVE-2026-119562 | phpMyAdmin through 5.2.3 contains an sql injection vulnerability that ... | bookworm, forky, sid, trixie | |
| CVE-2026-119563 | phpMyAdmin through 5.2.3 contains a stored cross-site scripting vulner ... | bookworm, forky, sid, trixie | |
| phppgadmin | CVE-2025-60796 | phpPgAdmin 7.13.0 and earlier contains multiple cross-site scripting ( ... | forky, sid, trixie |
| CVE-2025-60797 | phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability i ... | forky, sid, trixie | |
| CVE-2025-60798 | phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability i ... | forky, sid, trixie | |
| CVE-2025-60799 | phpPgAdmin 7.13.0 and earlier contains an incorrect access control vul ... | forky, sid, trixie | |
| prometheus-postgres-exporter | CVE-2026-80220 | bookworm, forky, sid, trixie | |
| CVE-2026-83550 | A flaw was found in postgres-exporter. Due to the blank import of `net ... | bookworm, forky, sid, trixie | |
| python-certvalidator | CVE-2026-109144 | A vulnerability was identified in wbond certvalidator up to 0.11.1. Th ... | forky, sid, trixie |
| rtmpdump | CVE-2026-112060 | librtmp in RTMPDump through 2.6 contains an out-of-bounds read and hea ... | bookworm, forky, sid, trixie |
| CVE-2026-112061 | librtmp (RTMPDump) through 2.6 contains a heap out-of-bounds read vuln ... | bookworm, forky, sid, trixie | |
| slic3r-prusa | CVE-2023-47268 | In libslic3r/GCode/PostProcessor.cpp in Prusa PrusaSlicer through 2.6. ... | bookworm, forky, sid, trixie |
| smpeg | CVE-2026-112009 | smpeg through 2.0.0 contains a heap out-of-bounds read vulnerability i ... | bookworm, forky, sid, trixie |
| CVE-2026-112010 | smpeg through 2.0.0 contains an integer underflow vulnerability in str ... | bookworm, forky, sid, trixie | |
| sofia-sip | CVE-2026-110658 | Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerabi ... | bookworm, forky, sid, trixie |
| sox | CVE-2026-111157 | SoX through 14.4.2 contains a heap out-of-bounds write vulnerability i ... | bookworm, trixie |
| spatialite | CVE-2026-112048 | libspatialite through 5.1.0 fails to validate the polygon ring count i ... | bookworm, forky, sid, trixie |
| CVE-2026-112052 | libspatialite through 5.1.0 contains an integer overflow vulnerability ... | bookworm, forky, sid, trixie | |
| sqlite3 | CVE-2026-119586 | SQLite command-line shell through 3.54.1 contains a command injection ... | bookworm, forky, sid, trixie |
| sqlparse | CVE-2026-112307 | sqlparse through 0.6.0 contains a PHP code injection vulnerability tha ... | bookworm, forky, sid, trixie |
| timidity | CVE-2026-111154 | libTiMidity through 0.2.8 contains a stack out-of-bounds write vulnera ... | bookworm, forky, sid, trixie |
| CVE-2026-111155 | libTiMidity through 0.2.8 contains a heap out-of-bounds read vulnerabi ... | bookworm, forky, sid, trixie | |
| CVE-2026-111156 | libTiMidity through 0.2.8 contains an out-of-bounds access vulnerabili ... | bookworm, forky, sid, trixie | |
| tinyexr | CVE-2026-110597 | Tinyexr through 3.2.0 contains a heap out-of-bounds read vulnerability ... | bookworm, forky, sid, trixie |
| unarr | CVE-2026-111273 | unarr through 1.1.1 contains an off-by-one heap-based buffer overflow ... | bookworm |
| CVE-2026-111274 | unarr through 1.1.1 contains a heap-based out-of-bounds read in zip_pa ... | bookworm | |
| vsftpd | CVE-2026-119567 | vsftpd through 3.0.5 contains an access control bypass vulnerability t ... | bookworm, forky, sid, trixie |
| CVE-2026-119568 | vsftpd through 3.0.5 contains an authentication bypass vulnerability i ... | bookworm, forky, sid, trixie | |
| wildmidi | CVE-2026-111162 | WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerabilit ... | bookworm, forky, sid, trixie |
| CVE-2026-111163 | WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerabilit ... | bookworm, forky, sid, trixie | |
| wordpress | CVE-2019-8943 | WordPress through 5.0.3 allows Path Traversal in wp_crop_image(). An a ... | bookworm, forky, sid, trixie |
| wv | CVE-2026-112055 | wvWare wv through 1.2.9 contains a stack-based out-of-bounds read vuln ... | bookworm, sid, trixie |
| CVE-2026-112056 | wvWare wv through 1.2.9 contains a heap-based out-of-bounds read vulne ... | bookworm, sid, trixie | |
| zziplib | CVE-2026-111141 | zziplib through 0.13.80 contains an out-of-bounds read vulnerability i ... | bookworm, forky, sid, trixie |
| zziplib | CVE-2026-111142 | Zziplib through 0.13.80 contains an out-of-bounds read vulnerability i ... | bookworm, forky, sid, trixie |