{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"aspell","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":[],"id":"tcs_01M5NVCMQMDM3CFZMG9WAFTWGD","modified_at":"2026-10-07T05:00:13.335556393Z","published_at":"2026-10-06T11:17:29.883Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-75819","https://security-tracker.debian.org/tracker/CVE-2026-75819"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-75819#Debian:14/aspell","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-75819"}],"summary":"GNU Aspell contains an out-of-bounds read vulnerability in ReadOnlyDict::load() in readonly_ws.cpp. When loading a binary .rws dictionary file, it uses offset fields from the file header as byte indic"}