[Git][security-tracker-team/security-tracker][master] Add CVE-2026-25540/mastodon, itp'ed

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu Feb 5 12:45:57 GMT 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fe34da92 by Salvatore Bonaccorso at 2026-02-05T13:45:22+01:00
Add CVE-2026-25540/mastodon, itp'ed

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -19,7 +19,7 @@ CVE-2026-25546 (Godot MCP is a Model Context Protocol (MCP) server for interacti
 CVE-2026-25543 (HtmlSanitizer is a .NET library for cleaning HTML fragments and docume ...)
 	NOT-FOR-US: HtmlSanitizer .NET library
 CVE-2026-25540 (Mastodon is a free, open-source social network server based on Activit ...)
-	TODO: check
+	- mastodon <itp> (bug #859741)
 CVE-2026-25539 (SiYuan is a personal knowledge management system. Prior to version 3.5 ...)
 	NOT-FOR-US: SiYuan
 CVE-2026-25538 (Devtron is an open source tool integration platform for Kubernetes. In ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fe34da92a7f084749cc27ad7b19dd1ba9144bffa

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fe34da92a7f084749cc27ad7b19dd1ba9144bffa
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260205/a9baf40e/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list