This page lists packages that may or may not be affected by known issues. This means that some additional work needs to be done to determined whether the package is actually vulnerable or not. This list is a good area for new contributors to make quick and meaningful contributions.
| Package | Bug | Description | Releases |
|---|---|---|---|
| angular.js | CVE-2026-27970 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie |
| CVE-2026-32635 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| CVE-2026-41423 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| CVE-2026-46417 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| CVE-2026-50168 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| CVE-2026-50169 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| CVE-2026-50170 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| CVE-2026-50171 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| CVE-2026-50184 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| CVE-2026-50555 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| CVE-2026-50556 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| CVE-2026-50557 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| CVE-2026-52725 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| CVE-2026-54264 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| CVE-2026-54265 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| CVE-2026-54266 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| CVE-2026-54267 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| CVE-2026-54268 | Angular is a development platform for building mobile and desktop web ... | bookworm, sid, trixie | |
| antlr4 | CVE-2026-13500 | A weakness has been identified in antlr ANTLR4 up to 4.13.2. Affected ... | bookworm, forky, sid, trixie |
| CVE-2026-13501 | A security vulnerability has been detected in antlr ANTLR4 up to 4.13. ... | bookworm, forky, sid, trixie | |
| CVE-2026-13502 | A flaw has been found in antlr ANTLR4 up to 4.13.2. This affects the f ... | bookworm, forky, sid, trixie | |
| CVE-2026-13503 | A vulnerability was detected in antlr ANTLR4 up to 4.13.2. Affected by ... | bookworm, forky, sid, trixie | |
| apt-cacher-ng | CVE-2025-11147 | Reflected cross-site scripting (XSS) in Apt-Cacher-NG v3.2.1. The vuln ... | bookworm, forky, sid, trixie |
| assimp | CVE-2026-108573 | A vulnerability was detected in Open Asset Import Library Assimp up to ... | bookworm, forky, sid, trixie |
| CVE-2026-111128 | Assimp through 6.0.5 contains a NULL pointer dereference vulnerability ... | bookworm, forky, sid, trixie | |
| CVE-2026-111129 | Open Asset Import Library (assimp) through 6.0.5 contains a NULL point ... | bookworm, forky, sid, trixie | |
| c3p0 | CVE-2026-55223 | c3p0 is a JDBC Connection pooling library. In versions prior to 0.14.0 ... | bookworm, forky, sid, trixie |
| caddy | CVE-2026-92284 | Caddy is an extensible server platform that uses TLS by default. In ve ... | bookworm, forky, sid, trixie |
| CVE-2026-92700 | Caddy is an extensible server platform that uses TLS by default. In ve ... | bookworm, forky, sid, trixie | |
| catdoc | CVE-2026-111126 | catdoc through 0.95 contains an out-of-bounds read vulnerability in th ... | bookworm, forky, sid, trixie |
| CVE-2026-111127 | catdoc through 0.95 contains an out-of-bounds read vulnerability in co ... | bookworm, forky, sid, trixie | |
| cfitsio | CVE-2026-111124 | CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnera ... | bookworm, forky, sid, trixie |
| CVE-2026-111125 | CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnera ... | bookworm, forky, sid, trixie | |
| commons-httpclient | CVE-2026-64607 | HttpClient based on the classic i/o model fails to correctly release t ... | bookworm, forky, sid, trixie |
| fastdds | CVE-2025-67108 | eProsima Fast-DDS v3.3 was discovered to contain improper validation f ... | bookworm, sid, trixie |
| fluidsynth | CVE-2026-111123 | FluidSynth through 2.6.1 contains an out-of-bounds write vulnerability ... | bookworm, forky, sid, trixie |
| gnome-remote-desktop | CVE-2026-18358 | A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterpr ... | bookworm, forky, sid, trixie |
| httpcomponents-client | CVE-2026-64607 | HttpClient based on the classic i/o model fails to correctly release t ... | bookworm, forky, sid, trixie |
| icingaweb2 | CVE-2022-50942 | Incinga Web 2.8.2 contains a client-side cross-site scripting vulnerab ... | bookworm, forky, sid, trixie |
| jline | CVE-2026-56740 | JLine is a Java library for handling console input. Prior to 3.30.14, ... | bookworm, forky, sid, trixie |
| CVE-2026-56741 | JLine is a Java library for handling console input. Prior to 3.30.14, ... | bookworm, forky, sid, trixie | |
| jline2 | CVE-2026-56740 | JLine is a Java library for handling console input. Prior to 3.30.14, ... | bookworm, forky, sid, trixie |
| CVE-2026-56741 | JLine is a Java library for handling console input. Prior to 3.30.14, ... | bookworm, forky, sid, trixie | |
| kgb-bot | CVE-2015-1554 | kgb-bot 1.33-2 allows remote attackers to cause a denial of service (c ... | bookworm, forky, sid, trixie |
| libansilove | CVE-2026-111143 | Ansilove libansilove through 1.4.2 contains an out-of-bounds read vuln ... | bookworm, forky, sid, trixie |
| CVE-2026-111144 | libansilove 1.3.0 through 1.4.2 contains a NULL pointer dereference vu ... | bookworm, forky, sid, trixie | |
| libfsapfs | CVE-2026-111133 | libfsapfs through 20260921 contains an integer underflow in libfsapfs_ ... | bookworm, forky, sid, trixie |
| libfwsi | CVE-2026-111134 | libfwsi through 20260522 contains a heap out-of-bounds read vulnerabil ... | bookworm, forky, sid, trixie |
| CVE-2026-111135 | libfwsi through 20260522 contains a heap out-of-bounds read vulnerabil ... | bookworm, forky, sid, trixie | |
| libgxps | CVE-2026-111132 | GNOME libgxps through 0.3.2 contains a heap out-of-bounds read in path ... | bookworm, forky, sid, trixie |
| libmodplug | CVE-2026-108577 | A vulnerability was determined in Konstanty Bialkowski libmodplug up t ... | bookworm, forky, sid, trixie |
| libregf | CVE-2026-111140 | libregf through 20260526 contains a heap out-of-bounds read in libregf ... | bookworm, forky, sid, trixie |
| libsmi | CVE-2026-111137 | libsmi through 0.5.0 contains an out-of-bounds write vulnerability in ... | bookworm, forky, sid, trixie |
| libxmp | CVE-2026-111131 | libxmp through 4.7.4 contains an off-by-one stack out-of-bounds read v ... | bookworm, forky, sid, trixie |
| linux | CVE-2020-0347 | In iptables, there is a possible out of bounds write due to an incorre ... | bookworm, forky, sid, trixie |
| llama.cpp | CVE-2026-43627 | llama.cpp builds b1283 through b9058 contain an integer overflow vulne ... | forky, sid |
| CVE-2026-43628 | llama.cpp builds b3978 through b9058 contain an integer underflow and ... | forky, sid | |
| CVE-2026-43629 | llama.cpp builds b4882 through b9058 contain a heap buffer overflow vu ... | forky, sid | |
| CVE-2026-43631 | llama.cpp builds b7492 through the latest b9060 contains a use-after-f ... | forky, sid | |
| CVE-2026-43632 | llama.cpp builds b7492 through the latest b9060 contains a use-after-f ... | forky, sid | |
| CVE-2026-52130 | llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in ... | forky, sid | |
| CVE-2026-52131 | llama.cpp b5693 and before has a Reachable Assertion via the gguf_read ... | forky, sid | |
| CVE-2026-52132 | llama.cpp through commit 97f06e9, when started with the --reranking fl ... | forky, sid | |
| openslide | CVE-2026-111130 | OpenSlide through 4.0.1 contains a heap out-of-bounds read vulnerabili ... | bookworm, forky, sid, trixie |
| openvswitch | CVE-2026-36499 | A missing upper-bound check in the udpif_set_threads() function of Ope ... | bookworm, forky, sid, trixie |
| pam | CVE-2025-8941 | A flaw was found in linux-pam. The pam_namespace module may improperly ... | bookworm, forky, sid, trixie |
| prometheus-postgres-exporter | CVE-2026-80220 | bookworm, forky, sid, trixie | |
| CVE-2026-83550 | A flaw was found in postgres-exporter. Due to the blank import of `net ... | bookworm, forky, sid, trixie | |
| slic3r-prusa | CVE-2023-47268 | In libslic3r/GCode/PostProcessor.cpp in Prusa PrusaSlicer through 2.6. ... | bookworm, sid, trixie |
| telegram-desktop | CVE-2026-7701 | A security vulnerability has been detected in Telegram Desktop up to 6 ... | bookworm, forky, sid |
| wordpress | CVE-2019-8943 | WordPress through 5.0.3 allows Path Traversal in wp_crop_image(). An a ... | bookworm, forky, sid, trixie |
| zziplib | CVE-2026-111141 | zziplib through 0.13.80 contains an out-of-bounds read vulnerability i ... | bookworm, forky, sid, trixie |
| zziplib | CVE-2026-111142 | Zziplib through 0.13.80 contains an out-of-bounds read vulnerability i ... | bookworm, forky, sid, trixie |