[Git][security-tracker-team/security-tracker][master] Add CVE-2026-27959/node-koa, itp'ed

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu Feb 26 13:17:41 GMT 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
15624c33 by Salvatore Bonaccorso at 2026-02-26T14:16:00+01:00
Add CVE-2026-27959/node-koa, itp'ed

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -45,7 +45,7 @@ CVE-2026-27963 (Audiobookshelf is a self-hosted audiobook and podcast server. A
 CVE-2026-27961 (Agenta is an open-source LLMOps platform. A Server-Side Template Injec ...)
 	NOT-FOR-US: Agenta
 CVE-2026-27959 (Koa is middleware for Node.js using ES2017 async functions. Prior to v ...)
-	TODO: check
+	- node-koa <itp> (bug #901972)
 CVE-2026-27954 (Live Helper Chat is an open-source application that enables live suppo ...)
 	NOT-FOR-US: Live Helper Chat
 CVE-2026-27952 (Agenta is an open-source LLMOps platform. In Agenta-API prior to versi ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/15624c33317bedd1cff8dd42d6837aa6ca94e786

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/15624c33317bedd1cff8dd42d6837aa6ca94e786
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260226/0fec15da/attachment.htm>


More information about the debian-security-tracker-commits mailing list