[Git][security-tracker-team/security-tracker][master] Add two new php-league-commonmark issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e55800f4 by Salvatore Bonaccorso at 2026-08-11T05:48:59+02:00
Add two new php-league-commonmark issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3065,9 +3065,15 @@ CVE-2026-71497 (jsoup is a Java library for working with real-world HTML. From 1
 	NOTE: https://github.com/jhy/jsoup/issues/2538
 	NOTE: Fixed by: https://github.com/jhy/jsoup/commit/92f1aca552548b484bc7d4b94c51e48b8e6eca70 (jsoup-1.23.1)
 CVE-2026-71488 (league/commonmark is a PHP library for parsing and rendering CommonMar ...)
-	TODO: check
+	- php-league-commonmark 2.9.0-1
+	NOTE: https://github.com/thephpleague/commonmark/security/advisories/GHSA-2q4p-g7hv-5rgv
+	NOTE: Fixed by: https://github.com/thephpleague/commonmark/commit/a6ef6cdc308dfa39a34239c35818e75892a0e6a8 (2.9.0)
+	NOTE: Fixed by: https://github.com/thephpleague/commonmark/commit/a70979ea0d7d3377bd7127536748454a922bf5eb (2.9.0)
+	NOTE: Fixed by: https://github.com/thephpleague/commonmark/commit/c97b02e5e652b992033b93ba5d6182f706343fc6 (2.9.0)
 CVE-2026-71478 (league/commonmark is a PHP library for parsing and rendering CommonMar ...)
-	TODO: check
+	- php-league-commonmark 2.9.0-1
+	NOTE: https://github.com/thephpleague/commonmark/security/advisories/GHSA-29pj-957v-52mc
+	NOTE: Fixed by: https://github.com/thephpleague/commonmark/commit/493a5aa7d65754b73846006eaff9c2c4431a8e2c (2.9.0)
 CVE-2026-71476 (Nx is a monorepo solution for TypeScript and polyglot codebases. From  ...)
 	NOT-FOR-US: Nx
 CVE-2026-71447 (AIL Project contains a stored cross-site scripting vulnerability in th ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e55800f477598aa4b393ea8039b6c3d4547bf60d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e55800f477598aa4b393ea8039b6c3d4547bf60d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260811/7ce861ba/attachment.htm>