debian/beaker vulnerabilities

Latest debian/beaker CVEs

Newest publication first

1. CVE-2013-7489 Deserialization of Untrusted Data in Beaker

   Published 2020-06-26

   Medium·CVSS 6.8 EPSS 1.1%

   The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted data, which could lead to arbitrary code execution.

2. CVE-2012-3458 Beaker Sensitive Information Disclosure vulnerability

   Published 2012-09-15

   Medium·CVSS 4.3 EPSS 2.5%

   Beaker before 1.6.4, when using PyCrypto to encrypt sessions, uses AES in ECB cipher mode, which might allow remote attackers to obtain portions of sensitive session data via unspecified vectors.

3. DSA-2541-1 beaker - information disclosure

   Published 2012-09-07

   Unknown

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.