[Git][security-tracker-team/security-tracker][master] new pandoc issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
de95d066 by Moritz Muehlenhoff at 2025-07-15T08:38:07+02:00
new pandoc issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -544,7 +544,10 @@ CVE-2025-52946 (A Use After Free vulnerability in the routing protocol daemon (r
 CVE-2025-52089 (A hidden remote support feature protected by a static secret in TOTOLI ...)
 	NOT-FOR-US: TOTOLINK
 CVE-2025-51591 (A Server-Side Request Forgery (SSRF) in JGM Pandoc v3.6.4 allows attac ...)
-	TODO: check
+	- pandoc <unfixed> (unimportant)
+	NOTE: https://github.com/jgm/pandoc/issues/10682
+	NOTE: https://github.com/jgm/pandoc/commit/67edf7ce7cd3563a180ae44bd122b012e22364f8
+	NOTE: Fix simply updates the documentation
 CVE-2025-50125 (A    CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists  ...)
 	NOT-FOR-US: Schneider Electric
 CVE-2025-50124 (A      CWE-269: Improper Privilege Management vulnerability exists tha ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/de95d066376aec030ee300b12874cae4b7ba26e8

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/de95d066376aec030ee300b12874cae4b7ba26e8
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250715/f593a107/attachment-0001.htm>