[Git][security-tracker-team/security-tracker][master] Add two new SFTPGo issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Aug 21 22:13:47 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5d95a7f9 by Salvatore Bonaccorso at 2026-08-21T23:13:07+02:00
Add two new SFTPGo issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -407,9 +407,9 @@ CVE-2026-50112 (SSRF via Metalink Mirror URL Resolution:  An authenticated tenan
 CVE-2026-49436 (LinkAce is a self-hosted archive to collect website links. Prior to ve ...)
 	NOT-FOR-US: LinkAce
 CVE-2026-49245 (SFTPGo is an open source, event-driven file transfer solution. From 2. ...)
-	TODO: check
+	- sftpgo <itp> (bug #1050829)
 CVE-2026-49244 (SFTPGo is an open source, event-driven file transfer solution. From 2. ...)
-	TODO: check
+	- sftpgo <itp> (bug #1050829)
 CVE-2026-49217 (Mailu is a mail server as a set of Docker images. Prior to version 202 ...)
 	NOT-FOR-US: Mailu
 CVE-2026-49114 (In ONNX before 1.21.0, the 'save_external_data' function builds the ex ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5d95a7f90d77f95b9a32ef482094c3d7a88d4d35

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5d95a7f90d77f95b9a32ef482094c3d7a88d4d35
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260821/f32f49aa/attachment.htm>


More information about the debian-security-tracker-commits mailing list