[Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Thu Aug 6 08:12:38 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
f8d2266e by security tracker role at 2026-08-06T07:12:31+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,241 @@
+CVE-2026-71321 (Nuxt is an open-source web development framework for Vue.js. From 3.1. ...)
+ TODO: check
+CVE-2026-71320 (Nuxt is an open-source web development framework for Vue.js. From 3.4. ...)
+ TODO: check
+CVE-2026-71319 (Nuxt is an open-source web development framework for Vue.js. Prior to ...)
+ TODO: check
+CVE-2026-71318 (Nuxt is an open-source web development framework for Vue.js. From 3.1. ...)
+ TODO: check
+CVE-2026-71316 (Nuxt is an open-source web development framework for Vue.js. From 4.4. ...)
+ TODO: check
+CVE-2026-71315 (Nuxt is an open-source web development framework for Vue.js. From 3.21 ...)
+ TODO: check
+CVE-2026-71314 (Nuxt is an open-source web development framework for Vue.js. From 3.1. ...)
+ TODO: check
+CVE-2026-71313 (rclone is a command-line program to sync files and directories to and ...)
+ TODO: check
+CVE-2026-71312 (rclone is a command-line program to sync files and directories to and ...)
+ TODO: check
+CVE-2026-71311 (rclone is a command-line program to sync files and directories to and ...)
+ TODO: check
+CVE-2026-71310 (rclone is a command-line program to sync files and directories to and ...)
+ TODO: check
+CVE-2026-71309 (rclone is a command-line program to sync files and directories to and ...)
+ TODO: check
+CVE-2026-70618 (Spacebar Server before commit 51da17c contains a missing authorization ...)
+ TODO: check
+CVE-2026-70617 (Spacebar Server before commit dcfd910 contains a missing authorization ...)
+ TODO: check
+CVE-2026-70616 (boringproxy through 0.10.0 contains a resource exhaustion vulnerabilit ...)
+ TODO: check
+CVE-2026-70615 (boringproxy through 0.10.0 contains a newline injection vulnerability ...)
+ TODO: check
+CVE-2026-69111 (Milvus through 2.6.22 and 3.0.0 contains an unauthenticated denial of ...)
+ TODO: check
+CVE-2026-68746 (Not Failing Securely ('Failing Open') vulnerability in livebook-dev li ...)
+ TODO: check
+CVE-2026-67873 (A heap-based buffer overflow exists in lib60870-C 2.4.0 in the server- ...)
+ TODO: check
+CVE-2026-67872 (An issue in Systerel S2OPC 1.7.3 allows a remote attacker to cause a d ...)
+ TODO: check
+CVE-2026-67871 (Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote ...)
+ TODO: check
+CVE-2026-67870 (In open62541 v1.5.5, the server-side AddReferences implementation cont ...)
+ TODO: check
+CVE-2026-67869 (Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote atta ...)
+ TODO: check
+CVE-2026-67867 (Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote ...)
+ TODO: check
+CVE-2026-67866 (Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote ...)
+ TODO: check
+CVE-2026-67865 (S2OPC 1.7.3 contains an out-of-bounds read in RepublishResponse handli ...)
+ TODO: check
+CVE-2026-67864 (An issue in open62541 v.1.5.5 and before allows a remote attacker to c ...)
+ TODO: check
+CVE-2026-67863 (In open62541 1.5.5, a server-side use-after-free exists in the local M ...)
+ TODO: check
+CVE-2026-67531 (FrontMCP is a TypeScript-first framework for the Model Context Protoco ...)
+ TODO: check
+CVE-2026-66885 (Cross-Site Request Forgery (CSRF) vulnerability in livebook-dev livebo ...)
+ TODO: check
+CVE-2026-66881 (Relative Path Traversal vulnerability in livebook-dev livebook allows ...)
+ TODO: check
+CVE-2026-66298 (Origin Validation Error vulnerability in livebook-dev livebook allows ...)
+ TODO: check
+CVE-2026-66297 (Improper Neutralization of Special Elements used in an OS Command (OS ...)
+ TODO: check
+CVE-2026-55524 (PraisonAI is a multi-agent teams system. In versions prior to 1.6.58, ...)
+ TODO: check
+CVE-2026-55523 (PraisonAI is a multi-agent teams system. In versions 1.5.128 through 1 ...)
+ TODO: check
+CVE-2026-55522 (PraisonAI is a multi-agent teams system. In versions 3.9.26 through 4. ...)
+ TODO: check
+CVE-2026-52466 (Open Library Foundation VuFind v11.0.3 and v4.1 is vulnerable to toIno ...)
+ TODO: check
+CVE-2026-34966 (Gitea prior to 1.27.0 contains a server-side request forgery vulnerabi ...)
+ TODO: check
+CVE-2026-21766 (The default login portlet in HCL Digital Experience and Digital Experi ...)
+ TODO: check
+CVE-2026-19028 (H5Z__filter_fletcher32 in H5Zfletcher32.c in HDF5 through 2.3.0 comput ...)
+ TODO: check
+CVE-2026-19027 (The H5Z__nbit_decompress_one_byte, H5Z__nbit_decompress_one_nooptype, ...)
+ TODO: check
+CVE-2026-19026 (H5Z__filter_nbit in H5Znbit.c in HDF5 through 2.3.0 dereferences cd_va ...)
+ TODO: check
+CVE-2026-19025 (H5O__layout_decode in H5Olayout.c in HDF5 through 2.3.0 does not valid ...)
+ TODO: check
+CVE-2026-19024 (NULL pointer dereference in H5Pget_fill_value in HDF5 before 2.1.1 all ...)
+ TODO: check
+CVE-2026-19023 (Untrusted pointer dereference in the render_bin_output function in the ...)
+ TODO: check
+CVE-2026-19007 (A vulnerability was determined in mf-yang openclaw-cn up to 0.2.1. Thi ...)
+ TODO: check
+CVE-2026-19006 (A vulnerability was found in mf-yang openclaw-cn 2026.2.5. This affect ...)
+ TODO: check
+CVE-2026-19005 (A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. Affect ...)
+ TODO: check
+CVE-2026-19000 (A vulnerability was identified in JeecgBoot up to 3.9.2. The affected ...)
+ TODO: check
+CVE-2026-18998 (A vulnerability was determined in cosmicstack-labs mercury-agent up to ...)
+ TODO: check
+CVE-2026-18997 (A vulnerability was found in cosmicstack-labs mercury-agent up to 1.1. ...)
+ TODO: check
+CVE-2026-18996 (A vulnerability has been found in cosmicstack-labs mercury-agent up to ...)
+ TODO: check
+CVE-2026-18995 (A flaw has been found in netease-youdao LobsterAI 2026.6.10. This affe ...)
+ TODO: check
+CVE-2026-18993 (A vulnerability was detected in NousResearch hermes-agent up to 0.16.0 ...)
+ TODO: check
+CVE-2026-18992 (A vulnerability was detected in zhayujie CowAgent up to 2.1.1. This vu ...)
+ TODO: check
+CVE-2026-18991 (A security vulnerability has been detected in nanocoai NanoClaw up to ...)
+ TODO: check
+CVE-2026-18990 (A vulnerability was detected in letta-ai LettaBot 0.2.0. Impacted is a ...)
+ TODO: check
+CVE-2026-18980 (A vulnerability was identified in nearai ironclaw up to 0.29.1. Affect ...)
+ TODO: check
+CVE-2026-18976 (A vulnerability was determined in NousResearch hermes-agent up to 0.16 ...)
+ TODO: check
+CVE-2026-18974 (A vulnerability was found in heshengtao super-agent-party up to 0.4.1. ...)
+ TODO: check
+CVE-2026-18973 (A vulnerability has been found in heshengtao super-agent-party up to 0 ...)
+ TODO: check
+CVE-2026-18970 (A flaw has been found in Rongzhitong Visual Integrated Command and Dis ...)
+ TODO: check
+CVE-2026-18969 (A vulnerability was detected in Rongzhitong Visual Integrated Command ...)
+ TODO: check
+CVE-2026-18968 (A security vulnerability has been detected in ttttonyhe OBlog up to 3c ...)
+ TODO: check
+CVE-2026-18967 (A flaw was found in the SAML broker component of Keycloak, an identity ...)
+ TODO: check
+CVE-2026-18959 (A flaw has been found in yushine InnoShop up to 0.8.2. Affected by thi ...)
+ TODO: check
+CVE-2026-18958 (A vulnerability was detected in imranrisal-dev Student-Management-Syst ...)
+ TODO: check
+CVE-2026-18954 (Incorrect authorization in the aggregation pipeline tool in Amazon AWS ...)
+ TODO: check
+CVE-2026-18953 (Improper limitation of a pathname to a restricted directory in the get ...)
+ TODO: check
+CVE-2026-18909 (A stack-based buffer overflow vulnerability exists in ELAN Microelectr ...)
+ TODO: check
+CVE-2026-18839 (An integer underflow was found in the popt library when formatting hel ...)
+ TODO: check
+CVE-2026-18510 (The TranslatePress \u2013 Translate Multilingual sites with AI Transla ...)
+ TODO: check
+CVE-2026-18411 (The KARR Security System and SWDS dealer-installed automotive anti-the ...)
+ TODO: check
+CVE-2026-18400 (The Slider, Gallery, and Carousel by MetaSlider \u2013 Image Slider, V ...)
+ TODO: check
+CVE-2026-18395 (The Child Pages Card WordPress plugin before 1.09 does not sanitise an ...)
+ TODO: check
+CVE-2026-18325 (The Forminator Forms \u2013 Contact Form, Payment Form & Custom Form B ...)
+ TODO: check
+CVE-2026-18050 (The Events Manager WordPress plugin before 7.4 does not perform any a ...)
+ TODO: check
+CVE-2026-17583 (The affected Thermo Fisher Applied Biosystems Genetic Analyzers arevu ...)
+ TODO: check
+CVE-2026-17556 (A path traversal vulnerability was identified in GitHub Enterprise Ser ...)
+ TODO: check
+CVE-2026-16954 (The AI Engine WordPress plugin before 3.6.4 does not redact secret co ...)
+ TODO: check
+CVE-2026-16734 (The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.2 ...)
+ TODO: check
+CVE-2026-16636 (The FluentSMTP \u2013 WP SMTP Plugin with Amazon SES, SendGrid, MailGu ...)
+ TODO: check
+CVE-2026-16537 (The Slick Slider WordPress plugin before 0.5.3 does not sanitize and e ...)
+ TODO: check
+CVE-2026-16290 (The ProfileGrid WordPress plugin before 6.0.0.0 does not perform auth ...)
+ TODO: check
+CVE-2026-16268 (The Newsletters WordPress plugin before 4.16 does not authenticate or ...)
+ TODO: check
+CVE-2026-16065 (The Welcart e-Commerce WordPress plugin before 2.11.32 does not proper ...)
+ TODO: check
+CVE-2026-16054 (The Drag and Drop Multiple File Upload for WooCommerce WordPress plugi ...)
+ TODO: check
+CVE-2026-15996 (A denial of service vulnerability was identified in GitHub Enterprise ...)
+ TODO: check
+CVE-2026-15991 (The File Manager plugin for WordPress is vulnerable to arbitrary file ...)
+ TODO: check
+CVE-2026-15459 (The WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentic ...)
+ TODO: check
+CVE-2026-14829 (The Checkimate \u2014 WooCommerce Checkout, Abandoned Cart Recovery & ...)
+ TODO: check
+CVE-2026-14547 (The Estatik Real Estate Plugin WordPress plugin before 4.3.3 does not ...)
+ TODO: check
+CVE-2026-14314 (The PeproDev WooCommerce Receipt Uploader WordPress plugin through 2.8 ...)
+ TODO: check
+CVE-2026-14313 (PeproDev WooCommerce Receipt Uploader (PeproDev WooCommerce Receipt Up ...)
+ TODO: check
+CVE-2026-14240 (The tourmaster WordPress plugin before 5.4.9 writes its order/booking ...)
+ TODO: check
+CVE-2026-14204 (The Google Authenticator WordPress plugin before 0.56 does not verify ...)
+ TODO: check
+CVE-2026-13703 (The SEO Redirection Plugin WordPress plugin before 9.19 does not perf ...)
+ TODO: check
+CVE-2026-13154 (The Gutenberg Essential Blocks WordPress plugin before 6.4.0 does not ...)
+ TODO: check
+CVE-2026-13153 (The Gutenberg Essential Blocks WordPress plugin before 6.4.0 does not ...)
+ TODO: check
+CVE-2026-12713 (The WPCargo Track & Trace WordPress plugin before 8.0.4 does not prope ...)
+ TODO: check
+CVE-2026-11588 (The EONSR AEO Agent WordPress plugin through 3.7.9 does not perform an ...)
+ TODO: check
+CVE-2025-63823 (My Safetipin Android Application 5.2.1 contains Hardcoded credentials ...)
+ TODO: check
+CVE-2025-63822 (SirenGPS Android Application 2.19.44 is vulnerable to Incorrect Access ...)
+ TODO: check
+CVE-2025-15678 (The Nexter Blocks WordPress plugin before 5.0.2 does not sanitize upl ...)
+ TODO: check
+CVE-2023-54389
+ REJECTED
+CVE-2023-54388
+ REJECTED
+CVE-2023-54387
+ REJECTED
+CVE-2023-54386
+ REJECTED
+CVE-2023-54385
+ REJECTED
+CVE-2023-54384
+ REJECTED
+CVE-2023-54383
+ REJECTED
+CVE-2023-54382
+ REJECTED
+CVE-2023-54381
+ REJECTED
+CVE-2023-54380
+ REJECTED
+CVE-2023-54379
+ REJECTED
+CVE-2023-54378
+ REJECTED
+CVE-2023-54377
+ REJECTED
+CVE-2023-54376
+ REJECTED
+CVE-2023-54375
+ REJECTED
CVE-2026-9205 (IBM Langflow OSS contains a weak cryptographic key derivation vulnerab ...)
NOT-FOR-US: IBM
CVE-2026-9203 (A server-side request forgery vulnerability in Progress MarkLogic Serv ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f8d2266e836d80de49eb3a574249301444f96064
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f8d2266e836d80de49eb3a574249301444f96064
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260806/a1eca35a/attachment.htm>
More information about the debian-security-tracker-commits
mailing list