[Git][security-tracker-team/security-tracker][master] Add CVE-2026-55185/miniflux

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4b01b8b6 by Salvatore Bonaccorso at 2026-08-22T10:26:24+02:00
Add CVE-2026-55185/miniflux

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -111,7 +111,10 @@ CVE-2026-61539 (Xinference is an inference API for running open-source, speech,
 CVE-2026-59989 (Phalcon is a high-performance, full-stack PHP framework. In 5.15.0 and ...)
 	NOT-FOR-US: Phalcon
 CVE-2026-55185 (Miniflux 2 is an open source feed reader. Prior to 2.3.1, IsRelativePa ...)
-	TODO: check
+	- miniflux 2.3.2-1
+	NOTE: https://github.com/miniflux/v2/security/advisories/GHSA-m999-j542-5w3r
+	NOTE: https://github.com/miniflux/v2/pull/4362
+	NOTE: Fixed by: https://github.com/miniflux/v2/commit/c896bafdaa19c3f280b02b1059f84706495f1949 (2.3.1)
 CVE-2026-55168 (Runtipi is a personal homeserver orchestrator. In 4.10.0 and earlier,  ...)
 	NOT-FOR-US: Runtipi
 CVE-2026-54457 (TensorZero is an open-source LLMOps platform that unifies an LLM gatew ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4b01b8b60c57b7a8246306e52dfba7d5224e2555

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4b01b8b60c57b7a8246306e52dfba7d5224e2555
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260822/9f23856f/attachment.htm>