[Git][security-tracker-team/security-tracker][master] Add CVE-2026-34966/gitea

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu Aug 6 10:01:29 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
bd6d251a by Salvatore Bonaccorso at 2026-08-06T11:00:05+02:00
Add CVE-2026-34966/gitea

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -201,7 +201,7 @@ CVE-2026-55522 (PraisonAI is a multi-agent teams system. In versions 3.9.26 thro
 CVE-2026-52466 (Open Library Foundation VuFind v11.0.3 and v4.1 is vulnerable to toIno ...)
 	NOT-FOR-US: Open Library Foundation VuFind
 CVE-2026-34966 (Gitea prior to 1.27.0 contains a server-side request forgery vulnerabi ...)
-	TODO: check
+	- gitea <removed>
 CVE-2026-21766 (The default login portlet in HCL Digital Experience and Digital Experi ...)
 	NOT-FOR-US: HCL
 CVE-2026-19028 (H5Z__filter_fletcher32 in H5Zfletcher32.c in HDF5 through 2.3.0 comput ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bd6d251ac4a8874d1a2be781eb8e744763367204

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bd6d251ac4a8874d1a2be781eb8e744763367204
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260806/1054749d/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list