[Git][security-tracker-team/security-tracker][master] Add new guzzle issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
12dbaf3d by Salvatore Bonaccorso at 2026-08-01T21:28:57+02:00
Add new guzzle issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,11 +1,14 @@
 CVE-2026-6453 (The CubeWP Framework plugin for WordPress is vulnerable to SQL Injecti ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-67355 (guzzlehttp/guzzle versions before 7.15.1 fail to preserve host-only co ...)
-	TODO: check
+	- guzzle 7.15.1-1
+	NOTE: https://github.com/guzzle/guzzle/security/advisories/GHSA-wm3w-8rrp-j577
 CVE-2026-67354 (guzzlehttp/guzzle versions before 7.15.1 contain an information disclo ...)
-	TODO: check
+	- guzzle 7.15.1-1
+	NOTE: https://github.com/guzzle/guzzle/security/advisories/GHSA-h95v-h523-3mw8
 CVE-2026-67353 (guzzlehttp/guzzle versions before 7.15.1 contain a denial of service v ...)
-	TODO: check
+	- guzzle 7.15.1-1
+	NOTE: https://github.com/guzzle/guzzle/security/advisories/GHSA-f283-ghqc-fg79
 CVE-2026-67352 (luci-app-https-dns-proxy contains a stored cross-site scripting vulner ...)
 	TODO: check
 CVE-2026-67344 (ArcadeDB before 26.7.2 fails to enforce the UPDATE_SCHEMA database per ...)
@@ -19,7 +22,8 @@ CVE-2026-67341 (ArcadeDB versions before 26.7.2 fail to enforce scripting author
 CVE-2026-67340 (ArcadeDB before 26.7.2 (arcadedb-engine) allows trigger scripts to loo ...)
 	TODO: check
 CVE-2026-67339 (guzzlehttp/guzzle versions before 7.14.2 fail to properly isolate Prox ...)
-	TODO: check
+	- guzzle 7.14.2-1
+	NOTE: https://github.com/guzzle/guzzle/security/advisories/GHSA-94pj-82f3-465w
 CVE-2026-67338 (JupyterLab before 4.5.9 contains a stored cross-site scripting vulnera ...)
 	TODO: check
 CVE-2026-67337 (better-auth versions before 1.4.9 contain a two-factor authentication  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/12dbaf3d0c0fbac4f38619aad2dd161dc76ccb01

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/12dbaf3d0c0fbac4f38619aad2dd161dc76ccb01
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260801/3ec1ea57/attachment.htm>