[Git][security-tracker-team/security-tracker][master] new arianna issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
dfadf3a6 by Moritz Muehlenhoff at 2026-04-24T23:55:04+02:00
new arianna issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -11,7 +11,10 @@ CVE-2026-4313 (AdaptiveGRC is vulnerable to Stored XSS via text type fields acro
 CVE-2026-4078 (The ITERAS plugin for WordPress is vulnerable to Stored Cross-Site Scr ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-42095 (bookserver in KDE Arianna before 26.04.1 allows attackers to read file ...)
-	TODO: check
+	- arianna <unfixed>
+	NOTE: https://kde.org/info/security/advisory-20260424-1.txt
+	NOTE: https://invent.kde.org/graphics/arianna/-/commit/485851d25de279a9d2711d3780443530e9851300
+	NOTE: https://invent.kde.org/graphics/arianna/-/commit/3cd56fce103ab62887c5592827d78a1197cd926a
 CVE-2026-42044 (Axios is a promise based HTTP client for the browser and Node.js. From ...)
 	TODO: check
 CVE-2026-42043 (Axios is a promise based HTTP client for the browser and Node.js. Prio ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dfadf3a6b0215ecb229f33551918d5a9360bfead

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dfadf3a6b0215ecb229f33551918d5a9360bfead
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260424/525e8473/attachment.htm>