[Git][security-tracker-team/security-tracker][master] new xmltodict issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
62f8a5f4 by Moritz Muehlenhoff at 2025-09-01T22:39:16+02:00
new xmltodict issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -43,7 +43,9 @@ CVE-2025-9770 (A weakness has been identified in Campcodes Hospital Management S
 CVE-2025-9769 (A security flaw has been discovered in D-Link DI-7400G+ 19.12.25A1. Af ...)
 	NOT-FOR-US: D-Link
 CVE-2025-9375 (XML Injection vulnerability in xmltodict allows Input Data Manipulatio ...)
-	TODO: check
+	- python-xmltodict <unfixed>
+	NOTE: https://github.com/martinblech/xmltodict/issues/376
+	NOTE: https://fluidattacks.com/advisories/mono
 CVE-2025-57799 (StreamVault is a multi-platform video parsing and downloading tool. Pr ...)
 	NOT-FOR-US: StreamVault
 CVE-2025-55007 (Knowage is an open source analytics and business intelligence suite. P ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/62f8a5f454834d26909d1df345af0f3d9a46d5c4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/62f8a5f454834d26909d1df345af0f3d9a46d5c4
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250901/d22d4b8e/attachment.htm>