[Git][security-tracker-team/security-tracker][master] Add CVE-2026-63481/hurl

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
017c7d60 by Salvatore Bonaccorso at 2026-08-21T06:39:52+02:00
Add CVE-2026-63481/hurl

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -338,7 +338,10 @@ CVE-2026-63495 (Libevent is an event notification library. From 2.2.0-alpha-dev
 CVE-2026-63490 (Handlebars.java provides logic-less and semantic Mustache templates wi ...)
 	TODO: check
 CVE-2026-63481 (Hurl is a command line tool that runs and tests HTTP requests defined  ...)
-	TODO: check
+	- hurl <unfixed>
+	NOTE: https://github.com/Orange-OpenSource/hurl/security/advisories/GHSA-7w2g-9mf9-324m
+	NOTE: https://github.com/Orange-OpenSource/hurl/pull/5119
+	NOTE: Fixed by: https://github.com/Orange-OpenSource/hurl/commit/ed91c894c2cf11704422010554037e3ba70b446e
 CVE-2026-63388 (Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-a ...)
 	TODO: check
 CVE-2026-63387 (Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-a ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/017c7d60d3fbae5994f1eaf2bb0e4cf8a551ed17

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/017c7d60d3fbae5994f1eaf2bb0e4cf8a551ed17
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260821/819eb0ac/attachment.htm>