[Git][security-tracker-team/security-tracker][master] Add CVE-2026-75509/joserfc

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
15659621 by Salvatore Bonaccorso at 2026-08-25T15:44:22+02:00
Add CVE-2026-75509/joserfc

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -123,7 +123,9 @@ CVE-2026-75554 (Insufficient Session Expiration vulnerability in the OAuth token
 CVE-2026-75542 (Incorrect Authorization vulnerability in the OAuth token endpoint in h ...)
 	TODO: check
 CVE-2026-75509 (joserfc is a Python library that provides an implementation of several ...)
-	TODO: check
+	- joserfc 1.7.3-1
+	NOTE: https://github.com/authlib/joserfc/security/advisories/GHSA-r74j-q665-7rpj
+	NOTE: Fixed by: https://github.com/authlib/joserfc/commit/76ee6a59bf5773c0af00b99076c5e199031f97f1 (1.7.3)
 CVE-2026-75464 (OneNav 1.2.4 contains an authenticated arbitrary file deletion vulnera ...)
 	NOT-FOR-US: OneNav
 CVE-2026-75369 (An out-of-bounds read vulnerability in the CAN::Application::parsePerf ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1565962155165212dbf7ce3a31172a6a04833a50

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1565962155165212dbf7ce3a31172a6a04833a50
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260825/1590be09/attachment.htm>