Debian — vulnerability landscape

Every CVE-affected package in the Debian ecosystem, sorted by risk.

Last updated 6/15/2026, 3:54:05 PM

#	Package	CVEs	KEV	Max EPSS
1	chromium	3078	63	93.3%
2	webkit2gtk	678	38	89.9%
3	wpewebkit	315	36	82.8%
4	linux	14308	30	94.3%
5	firefox-esr	953	11	93.3%
6	roundcube	87	11	93.3%
7	thunderbird	901	10	93.3%
8	linux-6.1	2962	6	43.5%
9	apache2	248	5	94.4%
10	exim4	68	5	93.9%
11	imagemagick	722	3	93.6%
12	graphicsmagick	142	3	93.6%
13	tomcat9	78	3	94.5%
14	activemq	34	3	94.4%
15	drupal7	33	3	94.5%
16	bash	16	3	94.2%
17	samba	198	2	94.4%
18	rails	113	2	94.3%
19	freetype	94	2	93.0%
20	chromium-browser	61	2	66.9%
21	tomcat10	52	2	94.4%
22	sudo	47	2	92.6%
23	lucene-solr	17	2	94.5%
24	open-vm-tools	17	2	2.2%
25	policykit-1	16	2	88.1%
26	apache-log4j2	10	2	94.4%
27	php-pear	6	2	93.4%
28	salt	6	2	94.4%
29	openssl	269	1	94.5%
30	phpmyadmin	256	1	93.3%
31	ghostscript	162	1	92.9%
32	glibc	158	1	93.9%
33	cacti	156	1	94.5%
34	zabbix	117	1	93.7%
35	otrs2	103	1	34.7%
36	php5	79	1	94.1%
37	trafficserver	73	1	94.4%
38	libspring-java	68	1	94.4%
39	redis	68	1	94.4%
40	linux-2.6	62	1	49.9%
41	nginx	62	1	94.4%
42	git	53	1	83.0%
43	erlang	41	1	93.5%
44	netty	39	1	94.4%
45	jetty9	37	1	94.4%
46	libxstream-java	37	1	94.3%
47	haproxy	35	1	94.4%
48	libvpx	26	1	8.7%
49	dnsdist	26	1	94.4%
50	varnish	23	1	94.4%
51	tomcat7	21	1	94.4%
52	shiro	19	1	94.3%
53	libwebp	16	1	93.3%
54	openjdk-6	16	1	93.5%
55	linux-4.9	15	1	80.4%
56	node-systeminformation	13	1	94.0%
57	php7.0	13	1	94.1%
58	h2o	13	1	94.4%
59	linux-5.10	13	1	48.5%
60	unrar-nonfree	13	1	92.8%
61	php7.3	13	1	94.1%
62	inetutils	12	1	92.6%
63	libphp-phpmailer	10	1	94.4%
64	grpc	10	1	94.4%
65	nghttp2	9	1	94.4%
66	opensmtpd	9	1	94.1%
67	adminer	8	1	94.1%
68	rar	6	1	92.8%
69	libimage-exiftool-perl	3	1	92.8%
70	phpunit	3	1	94.2%
71	node-jquery	3	1	34.7%
72	pdf.js	1	1	71.6%
73	libspreadsheet-parseexcel-perl	1	1	55.7%
74	wireshark	712	—	79.8%
75	xen	457	—	89.6%
76	qemu	449	—	88.5%
77	ffmpeg	380	—	56.2%
78	gpac	363	—	1.5%
79	wordpress	346	—	93.7%
80	binutils	285	—	22.7%
81	mediawiki	276	—	58.4%
82	tiff	268	—	68.7%
83	vim	237	—	54.1%
84	asterisk	198	—	87.1%
85	tcpdump	187	—	72.7%
86	curl	172	—	68.0%
87	openjdk-11	172	—	11.0%
88	clamav	157	—	88.3%
89	freerdp2	151	—	14.3%
90	python-django	149	—	92.8%
91	golang-1.15	138	—	64.9%
92	xorg-server	138	—	27.6%
93	poppler	133	—	39.9%
94	bind9	132	—	92.6%
95	krb5	126	—	92.6%
96	hdf5	122	—	1.3%
97	squid	121	—	86.2%
98	vlc	120	—	86.2%
99	cups	120	—	82.3%
100	nvidia-graphics-drivers	117	—	94.3%
101	libxml2	116	—	56.6%
102	texlive-bin	109	—	16.2%
103	golang-1.19	109	—	64.9%
104	wolfssl	108	—	93.5%
105	tor	99	—	17.0%
106	nodejs	98	—	89.4%
107	openjdk-17	97	—	34.3%
108	openssh	96	—	90.4%
109	ntp	94	—	92.1%
110	intel-microcode	91	—	88.5%
111	zoneminder	87	—	78.8%
112	python2.7	84	—	45.1%
113	libvirt	83	—	13.7%
114	gtkwave	82	—	0.2%
115	symfony	82	—	88.7%
116	pidgin	82	—	39.0%
117	nss	81	—	93.5%
118	suricata	81	—	37.4%
119	libarchive	81	—	37.7%
120	mariadb-10.5	78	—	48.9%
121	gimp	78	—	88.8%
122	openjpeg2	78	—	6.6%
123	xpdf	77	—	28.7%
124	exiv2	77	—	12.8%
125	perl	76	—	82.0%
126	nasm	75	—	16.4%
127	freerdp3	73	—	1.4%
128	openexr	72	—	25.3%
129	dovecot	71	—	38.3%
130	spip	71	—	93.4%
131	ansible	71	—	10.1%
132	jackson-databind	69	—	84.9%
133	pypy3	68	—	7.3%
134	python3.9	68	—	7.3%
135	nvidia-graphics-drivers-tesla-460	68	—	1.1%
136	nvidia-graphics-drivers-tesla-470	67	—	1.1%
137	nvidia-graphics-drivers-tesla-450	67	—	6.6%
138	nvidia-graphics-drivers-tesla-418	66	—	6.6%
139	libreoffice	66	—	92.3%
140	gnutls28	64	—	93.5%
141	virtuoso-opensource	63	—	0.5%
142	libraw	63	—	5.2%
143	389-ds-base	62	—	14.7%
144	nova	62	—	87.2%
145	mbedtls	62	—	8.4%
146	assimp	62	—	0.3%
147	grub2	62	—	4.7%
148	sqlite3	61	—	54.8%
149	systemd	61	—	43.7%
150	libde265	60	—	0.5%
151	php7.4	60	—	31.8%
152	xwayland	60	—	3.0%
153	pillow	59	—	5.3%
154	netatalk	59	—	85.7%
155	mupdf	57	—	34.5%
156	iceweasel	57	—	83.3%
157	libpodofo	57	—	5.8%
158	pdns-recursor	56	—	70.8%
159	nvidia-graphics-drivers-legacy-390xx	56	—	6.6%
160	golang-1.24	56	—	0.3%
161	nvidia-graphics-drivers-tesla	56	—	0.2%
162	nvidia-open-gpu-kernel-modules	55	—	0.2%
163	freeimage	54	—	4.7%
164	libgd2	53	—	87.9%
165	icedove	53	—	83.3%
166	python3.11	52	—	3.0%
167	pcre3	52	—	21.0%
168	opensc	52	—	1.1%
169	gst-plugins-good1.0	51	—	19.5%
170	undertow	51	—	22.7%
171	request-tracker4	51	—	2.3%
172	keystone	51	—	4.0%
173	subversion	51	—	86.6%
174	edk2	50	—	1.3%
175	libsixel	50	—	0.9%
176	tcpreplay	50	—	1.5%
177	libsoup3	50	—	1.3%
178	expat	49	—	11.0%
179	frr	49	—	4.2%
180	kubernetes	49	—	91.2%
181	docker.io	49	—	71.9%
182	wpa	49	—	16.4%
183	unbound	48	—	43.7%
184	ruby-rack	48	—	16.1%
185	libsoup2.4	48	—	4.5%
186	redmine	47	—	73.6%
187	dnsmasq	47	—	93.4%
188	mutt	47	—	13.4%
189	u-boot	47	—	2.0%
190	python3.13	46	—	3.0%
191	nvidia-cuda-toolkit	46	—	0.6%
192	strongswan	46	—	13.6%
193	openjdk-21	46	—	2.1%
194	libstb	46	—	1.2%
195	busybox	45	—	16.5%
196	pdns	45	—	85.5%
197	openimageio	45	—	15.8%
198	postgresql-13	45	—	82.4%
199	cgal	45	—	4.3%
200	libvncserver	44	—	37.7%
201	golang-1.25	44	—	0.1%
202	rust-coreutils	44	—	0.0%
203	matrix-synapse	44	—	13.2%
204	w3m	44	—	13.8%
205	dwarfutils	42	—	2.7%
206	mplayer	42	—	68.1%
207	freeradius	41	—	25.9%
208	puppet	41	—	5.8%
209	biosig	41	—	1.6%
210	file	41	—	41.9%
211	libxmltok	40	—	11.0%
212	glib2.0	40	—	30.8%
213	php8.2	39	—	31.8%
214	openldap	39	—	71.5%
215	libsndfile	38	—	58.5%
216	lighttpd	37	—	93.5%
217	ruby2.7	37	—	8.8%
218	dokuwiki	37	—	35.8%
219	bluez	37	—	36.0%
220	yasm	36	—	0.7%
221	rsync	36	—	44.3%
222	ceph	36	—	18.0%
223	bouncycastle	36	—	68.1%
224	firmware-nonfree	36	—	47.5%
225	blender	36	—	11.3%
226	proftpd-dfsg	36	—	93.8%
227	ntfs-3g	36	—	8.3%
228	faad2	36	—	6.6%
229	icu	36	—	41.9%
230	upx-ucl	35	—	0.5%
231	openafs	35	—	9.9%
232	libssh	35	—	78.3%
233	incus	35	—	0.3%
234	exempi	35	—	2.9%
235	postgresql-15	34	—	82.4%
236	irssi	34	—	6.5%
237	python-aiohttp	33	—	93.6%
238	pytorch	33	—	25.1%
239	libxslt	32	—	22.1%
240	fig2dev	32	—	0.7%
241	hoteldruid	32	—	43.8%
242	elfutils	32	—	3.5%
243	xulrunner	32	—	48.6%
244	openvpn	32	—	5.5%
245	tomcat11	32	—	12.9%
246	gdk-pixbuf	32	—	31.1%
247	net-snmp	31	—	27.4%
248	qtbase-opensource-src	31	—	7.1%
249	fontforge	30	—	23.1%
250	opencv	30	—	5.5%
251	xrdp	30	—	2.8%
252	qemu-kvm	30	—	19.3%
253	python3.14	30	—	0.2%
254	libpng1.6	29	—	4.1%
255	libexif	29	—	32.1%
256	ncurses	29	—	6.2%
257	sdl-image1.2	29	—	23.4%
258	fastdds	29	—	1.3%
259	putty	29	—	53.0%
260	libextractor	29	—	31.0%
261	sox	29	—	48.5%
262	qt4-x11	28	—	15.3%
263	dcmtk	28	—	5.7%
264	dbus	28	—	30.8%
265	graphite2	28	—	2.4%
266	libsass	28	—	3.1%
267	libsdl2-image	28	—	7.2%
268	ring	27	—	1.7%
269	lrzip	27	—	1.0%
270	ruby3.1	27	—	8.8%
271	avahi	27	—	77.1%
272	moin	27	—	49.7%
273	simplesamlphp	27	—	1.9%
274	glusterfs	27	—	10.8%
275	evolution	27	—	34.5%
276	golang-go.crypto	27	—	53.0%
277	privoxy	27	—	3.5%
278	golang-1.26	27	—	0.1%
279	neutron	27	—	14.3%
280	rubygems	27	—	25.1%
281	pypdf2	26	—	0.2%
282	p7zip	26	—	54.7%
283	kanboard	26	—	5.2%
284	mapserver	26	—	11.5%
285	jruby	26	—	7.3%
286	heimdal	25	—	92.6%
287	mruby	25	—	1.4%
288	glance	25	—	3.6%
289	openjdk-7	25	—	93.5%
290	awstats	25	—	92.0%
291	consul	25	—	87.8%
292	ccextractor	25	—	0.9%
293	mosquitto	25	—	23.1%
294	jq	25	—	10.2%
295	node-axios	25	—	13.1%
296	openvswitch	25	—	9.3%
297	binaryen	25	—	0.5%
298	jhead	25	—	2.0%
299	libmatio	25	—	0.6%
300	postgresql-17	25	—	82.4%

Debian — vulnerability landscape

Subscribe via RSS

Every CVE-affected package in the Debian ecosystem, sorted by risk.

Last updated 6/15/2026, 3:54:05 PM

#	Package	CVEs	KEV	Max EPSS
1	chromium	3078	63	93.3%
2	webkit2gtk	678	38	89.9%
3	wpewebkit	315	36	82.8%
4	linux	14308	30	94.3%
5	firefox-esr	953	11	93.3%
6	roundcube	87	11	93.3%
7	thunderbird	901	10	93.3%
8	linux-6.1	2962	6	43.5%
9	apache2	248	5	94.4%
10	exim4	68	5	93.9%
11	imagemagick	722	3	93.6%
12	graphicsmagick	142	3	93.6%
13	tomcat9	78	3	94.5%
14	activemq	34	3	94.4%
15	drupal7	33	3	94.5%
16	bash	16	3	94.2%
17	samba	198	2	94.4%
18	rails	113	2	94.3%
19	freetype	94	2	93.0%
20	chromium-browser	61	2	66.9%
21	tomcat10	52	2	94.4%
22	sudo	47	2	92.6%
23	lucene-solr	17	2	94.5%
24	open-vm-tools	17	2	2.2%
25	policykit-1	16	2	88.1%
26	apache-log4j2	10	2	94.4%
27	php-pear	6	2	93.4%
28	salt	6	2	94.4%
29	openssl	269	1	94.5%
30	phpmyadmin	256	1	93.3%
31	ghostscript	162	1	92.9%
32	glibc	158	1	93.9%
33	cacti	156	1	94.5%
34	zabbix	117	1	93.7%
35	otrs2	103	1	34.7%
36	php5	79	1	94.1%
37	trafficserver	73	1	94.4%
38	libspring-java	68	1	94.4%
39	redis	68	1	94.4%
40	linux-2.6	62	1	49.9%
41	nginx	62	1	94.4%
42	git	53	1	83.0%
43	erlang	41	1	93.5%
44	netty	39	1	94.4%
45	jetty9	37	1	94.4%
46	libxstream-java	37	1	94.3%
47	haproxy	35	1	94.4%
48	libvpx	26	1	8.7%
49	dnsdist	26	1	94.4%
50	varnish	23	1	94.4%
51	tomcat7	21	1	94.4%
52	shiro	19	1	94.3%
53	libwebp	16	1	93.3%
54	openjdk-6	16	1	93.5%
55	linux-4.9	15	1	80.4%
56	node-systeminformation	13	1	94.0%
57	php7.0	13	1	94.1%
58	h2o	13	1	94.4%
59	linux-5.10	13	1	48.5%
60	unrar-nonfree	13	1	92.8%
61	php7.3	13	1	94.1%
62	inetutils	12	1	92.6%
63	libphp-phpmailer	10	1	94.4%
64	grpc	10	1	94.4%
65	nghttp2	9	1	94.4%
66	opensmtpd	9	1	94.1%
67	adminer	8	1	94.1%
68	rar	6	1	92.8%
69	libimage-exiftool-perl	3	1	92.8%
70	phpunit	3	1	94.2%
71	node-jquery	3	1	34.7%
72	pdf.js	1	1	71.6%
73	libspreadsheet-parseexcel-perl	1	1	55.7%
74	wireshark	712	—	79.8%
75	xen	457	—	89.6%
76	qemu	449	—	88.5%
77	ffmpeg	380	—	56.2%
78	gpac	363	—	1.5%
79	wordpress	346	—	93.7%
80	binutils	285	—	22.7%
81	mediawiki	276	—	58.4%
82	tiff	268	—	68.7%
83	vim	237	—	54.1%
84	asterisk	198	—	87.1%
85	tcpdump	187	—	72.7%
86	curl	172	—	68.0%
87	openjdk-11	172	—	11.0%
88	clamav	157	—	88.3%
89	freerdp2	151	—	14.3%
90	python-django	149	—	92.8%
91	golang-1.15	138	—	64.9%
92	xorg-server	138	—	27.6%
93	poppler	133	—	39.9%
94	bind9	132	—	92.6%
95	krb5	126	—	92.6%
96	hdf5	122	—	1.3%
97	squid	121	—	86.2%
98	vlc	120	—	86.2%
99	cups	120	—	82.3%
100	nvidia-graphics-drivers	117	—	94.3%
101	libxml2	116	—	56.6%
102	texlive-bin	109	—	16.2%
103	golang-1.19	109	—	64.9%
104	wolfssl	108	—	93.5%
105	tor	99	—	17.0%
106	nodejs	98	—	89.4%
107	openjdk-17	97	—	34.3%
108	openssh	96	—	90.4%
109	ntp	94	—	92.1%
110	intel-microcode	91	—	88.5%
111	zoneminder	87	—	78.8%
112	python2.7	84	—	45.1%
113	libvirt	83	—	13.7%
114	gtkwave	82	—	0.2%
115	symfony	82	—	88.7%
116	pidgin	82	—	39.0%
117	nss	81	—	93.5%
118	suricata	81	—	37.4%
119	libarchive	81	—	37.7%
120	mariadb-10.5	78	—	48.9%
121	gimp	78	—	88.8%
122	openjpeg2	78	—	6.6%
123	xpdf	77	—	28.7%
124	exiv2	77	—	12.8%
125	perl	76	—	82.0%
126	nasm	75	—	16.4%
127	freerdp3	73	—	1.4%
128	openexr	72	—	25.3%
129	dovecot	71	—	38.3%
130	spip	71	—	93.4%
131	ansible	71	—	10.1%
132	jackson-databind	69	—	84.9%
133	pypy3	68	—	7.3%
134	python3.9	68	—	7.3%
135	nvidia-graphics-drivers-tesla-460	68	—	1.1%
136	nvidia-graphics-drivers-tesla-470	67	—	1.1%
137	nvidia-graphics-drivers-tesla-450	67	—	6.6%
138	nvidia-graphics-drivers-tesla-418	66	—	6.6%
139	libreoffice	66	—	92.3%
140	gnutls28	64	—	93.5%
141	virtuoso-opensource	63	—	0.5%
142	libraw	63	—	5.2%
143	389-ds-base	62	—	14.7%
144	nova	62	—	87.2%
145	mbedtls	62	—	8.4%
146	assimp	62	—	0.3%
147	grub2	62	—	4.7%
148	sqlite3	61	—	54.8%
149	systemd	61	—	43.7%
150	libde265	60	—	0.5%
151	php7.4	60	—	31.8%
152	xwayland	60	—	3.0%
153	pillow	59	—	5.3%
154	netatalk	59	—	85.7%
155	mupdf	57	—	34.5%
156	iceweasel	57	—	83.3%
157	libpodofo	57	—	5.8%
158	pdns-recursor	56	—	70.8%
159	nvidia-graphics-drivers-legacy-390xx	56	—	6.6%
160	golang-1.24	56	—	0.3%
161	nvidia-graphics-drivers-tesla	56	—	0.2%
162	nvidia-open-gpu-kernel-modules	55	—	0.2%
163	freeimage	54	—	4.7%
164	libgd2	53	—	87.9%
165	icedove	53	—	83.3%
166	python3.11	52	—	3.0%
167	pcre3	52	—	21.0%
168	opensc	52	—	1.1%
169	gst-plugins-good1.0	51	—	19.5%
170	undertow	51	—	22.7%
171	request-tracker4	51	—	2.3%
172	keystone	51	—	4.0%
173	subversion	51	—	86.6%
174	edk2	50	—	1.3%
175	libsixel	50	—	0.9%
176	tcpreplay	50	—	1.5%
177	libsoup3	50	—	1.3%
178	expat	49	—	11.0%
179	frr	49	—	4.2%
180	kubernetes	49	—	91.2%
181	docker.io	49	—	71.9%
182	wpa	49	—	16.4%
183	unbound	48	—	43.7%
184	ruby-rack	48	—	16.1%
185	libsoup2.4	48	—	4.5%
186	redmine	47	—	73.6%
187	dnsmasq	47	—	93.4%
188	mutt	47	—	13.4%
189	u-boot	47	—	2.0%
190	python3.13	46	—	3.0%
191	nvidia-cuda-toolkit	46	—	0.6%
192	strongswan	46	—	13.6%
193	openjdk-21	46	—	2.1%
194	libstb	46	—	1.2%
195	busybox	45	—	16.5%
196	pdns	45	—	85.5%
197	openimageio	45	—	15.8%
198	postgresql-13	45	—	82.4%
199	cgal	45	—	4.3%
200	libvncserver	44	—	37.7%
201	golang-1.25	44	—	0.1%
202	rust-coreutils	44	—	0.0%
203	matrix-synapse	44	—	13.2%
204	w3m	44	—	13.8%
205	dwarfutils	42	—	2.7%
206	mplayer	42	—	68.1%
207	freeradius	41	—	25.9%
208	puppet	41	—	5.8%
209	biosig	41	—	1.6%
210	file	41	—	41.9%
211	libxmltok	40	—	11.0%
212	glib2.0	40	—	30.8%
213	php8.2	39	—	31.8%
214	openldap	39	—	71.5%
215	libsndfile	38	—	58.5%
216	lighttpd	37	—	93.5%
217	ruby2.7	37	—	8.8%
218	dokuwiki	37	—	35.8%
219	bluez	37	—	36.0%
220	yasm	36	—	0.7%
221	rsync	36	—	44.3%
222	ceph	36	—	18.0%
223	bouncycastle	36	—	68.1%
224	firmware-nonfree	36	—	47.5%
225	blender	36	—	11.3%
226	proftpd-dfsg	36	—	93.8%
227	ntfs-3g	36	—	8.3%
228	faad2	36	—	6.6%
229	icu	36	—	41.9%
230	upx-ucl	35	—	0.5%
231	openafs	35	—	9.9%
232	libssh	35	—	78.3%
233	incus	35	—	0.3%
234	exempi	35	—	2.9%
235	postgresql-15	34	—	82.4%
236	irssi	34	—	6.5%
237	python-aiohttp	33	—	93.6%
238	pytorch	33	—	25.1%
239	libxslt	32	—	22.1%
240	fig2dev	32	—	0.7%
241	hoteldruid	32	—	43.8%
242	elfutils	32	—	3.5%
243	xulrunner	32	—	48.6%
244	openvpn	32	—	5.5%
245	tomcat11	32	—	12.9%
246	gdk-pixbuf	32	—	31.1%
247	net-snmp	31	—	27.4%
248	qtbase-opensource-src	31	—	7.1%
249	fontforge	30	—	23.1%
250	opencv	30	—	5.5%
251	xrdp	30	—	2.8%
252	qemu-kvm	30	—	19.3%
253	python3.14	30	—	0.2%
254	libpng1.6	29	—	4.1%
255	libexif	29	—	32.1%
256	ncurses	29	—	6.2%
257	sdl-image1.2	29	—	23.4%
258	fastdds	29	—	1.3%
259	putty	29	—	53.0%
260	libextractor	29	—	31.0%
261	sox	29	—	48.5%
262	qt4-x11	28	—	15.3%
263	dcmtk	28	—	5.7%
264	dbus	28	—	30.8%
265	graphite2	28	—	2.4%
266	libsass	28	—	3.1%
267	libsdl2-image	28	—	7.2%
268	ring	27	—	1.7%
269	lrzip	27	—	1.0%
270	ruby3.1	27	—	8.8%
271	avahi	27	—	77.1%
272	moin	27	—	49.7%
273	simplesamlphp	27	—	1.9%
274	glusterfs	27	—	10.8%
275	evolution	27	—	34.5%
276	golang-go.crypto	27	—	53.0%
277	privoxy	27	—	3.5%
278	golang-1.26	27	—	0.1%
279	neutron	27	—	14.3%
280	rubygems	27	—	25.1%
281	pypdf2	26	—	0.2%
282	p7zip	26	—	54.7%
283	kanboard	26	—	5.2%
284	mapserver	26	—	11.5%
285	jruby	26	—	7.3%
286	heimdal	25	—	92.6%
287	mruby	25	—	1.4%
288	glance	25	—	3.6%
289	openjdk-7	25	—	93.5%
290	awstats	25	—	92.0%
291	consul	25	—	87.8%
292	ccextractor	25	—	0.9%
293	mosquitto	25	—	23.1%
294	jq	25	—	10.2%
295	node-axios	25	—	13.1%
296	openvswitch	25	—	9.3%
297	binaryen	25	—	0.5%
298	jhead	25	—	2.0%
299	libmatio	25	—	0.6%
300	postgresql-17	25	—	82.4%