[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu Jul 2 20:13:55 BST 2026 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
cbef361d by security tracker role at 2026-07-02T19:13:49+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,8 +1,360 @@
-CVE-2026-53358 [Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen()]
+CVE-2026-9834 (The WP Database Backup \u2013 Unlimited Database & Files Backup by Bac ...)
+	TODO: check
+CVE-2026-9563 (In Eclipse Parsson published Maven Central artifacts before version 1. ...)
+	TODO: check
+CVE-2026-9272 (In Progress Flowmon ADS versions prior to 12.5.6 and 13.0.5, a vulnera ...)
+	TODO: check
+CVE-2026-9188 (The Appointment Bookings for Zoom GoogleMeet and more \u2013 Wappointm ...)
+	TODO: check
+CVE-2026-9145 (The Database for Contact Form 7, WPforms, Elementor forms plugin for W ...)
+	TODO: check
+CVE-2026-8699 (A stored Cross-Site Scripting (XSS) vulnerability has been identified  ...)
+	TODO: check
+CVE-2026-8482 (A vulnerability was discovered on StormShield Network Security 4.3.0 t ...)
+	TODO: check
+CVE-2026-8441 (The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Inj ...)
+	TODO: check
+CVE-2026-8147 (In MLflow versions prior to 3.14.0, when running with authentication e ...)
+	TODO: check
+CVE-2026-8079 (In Progress Flowmon versions prior to 12.5.9 and 13.0.11, a vulnerabil ...)
+	TODO: check
+CVE-2026-7311 (The TinyPNG \u2013 JPEG, PNG & WebP image compression plugin for WordP ...)
+	TODO: check
+CVE-2026-5524 (The Divi Form Builder plugin for WordPress is vulnerable to Arbitrary  ...)
+	TODO: check
+CVE-2026-58653 (PraisonAI before 0.1.7 fails to validate that project_id in issue crea ...)
+	TODO: check
+CVE-2026-58652 (luci-app-travelmate (and the travelmate package) contain a privilege-e ...)
+	TODO: check
+CVE-2026-58465 (Eclipse Wakaama before snapshot/2026-05-26 contains an unbounded memor ...)
+	TODO: check
+CVE-2026-58455 (Dockwatch through 0.6.567 contains an unauthenticated OS command injec ...)
+	TODO: check
+CVE-2026-57766 (Unauthenticated Cross Site Request Forgery (CSRF) in WPIDE \u2013 File ...)
+	TODO: check
+CVE-2026-57765 (Contributor SQL Injection in WP EasyCart <= 5.9.0 versions.)
+	TODO: check
+CVE-2026-57764 (Contributor Cross Site Scripting (XSS) in Surbma | Yoast SEO Breadcrum ...)
+	TODO: check
+CVE-2026-57763 (Contributor Cross Site Scripting (XSS) in Structured Content <= 1.7.0  ...)
+	TODO: check
+CVE-2026-57762 (Author Cross Site Scripting (XSS) in Simple URLs <= 151 versions.)
+	TODO: check
+CVE-2026-57761 (Unauthenticated Cross Site Request Forgery (CSRF) in SEOWP <= 3.12.2 v ...)
+	TODO: check
+CVE-2026-57760 (Missing Authorization vulnerability in Sendcloud Sendcloud Shipping al ...)
+	TODO: check
+CVE-2026-57759 (Unauthenticated Cross Site Request Forgery (CSRF) in ProfileGrid  <= 5 ...)
+	TODO: check
+CVE-2026-57758 (Unauthenticated Cross Site Request Forgery (CSRF) in Permalink Manager ...)
+	TODO: check
+CVE-2026-57757 (Unauthenticated Cross Site Request Forgery (CSRF) in pCloud WP Backup  ...)
+	TODO: check
+CVE-2026-57756 (Contributor SQL Injection in nicen-localize-image <= 1.4.9 versions.)
+	TODO: check
+CVE-2026-57755 (Contributor Cross Site Scripting (XSS) in Mosaic Gallery – Advan ...)
+	TODO: check
+CVE-2026-57754 (Contributor Cross Site Scripting (XSS) in Livemesh Addons for WPBakery ...)
+	TODO: check
+CVE-2026-57753 (Unauthenticated Sensitive Data Exposure in Kit (formerly ConvertKit) f ...)
+	TODO: check
+CVE-2026-57752 (Contributor SQL Injection in iNET Webkit 1.2.4 versions.)
+	TODO: check
+CVE-2026-57751 (Unauthenticated Cross Site Request Forgery (CSRF) in Heateor Social Lo ...)
+	TODO: check
+CVE-2026-57750 (Unauthenticated Broken Access Control in ez Form Calculator Premium <= ...)
+	TODO: check
+CVE-2026-57749 (Contributor Local File Inclusion in SportsPress Pro <= 2.7.29 versions ...)
+	TODO: check
+CVE-2026-57748 (Contributor Local File Inclusion in Shopify <= 1.0.0 versions.)
+	TODO: check
+CVE-2026-57747 (Unauthenticated Cross Site Request Forgery (CSRF) in Booked <= 3.0.0 v ...)
+	TODO: check
+CVE-2026-57746 (Subscriber Broken Access Control in Booked <= 3.0.0 versions.)
+	TODO: check
+CVE-2026-57731 (Contributor Broken Access Control in Flatsome <= 3.20.5 versions.)
+	TODO: check
+CVE-2026-57730 (Subscriber Broken Access Control in Flatsome <= 3.20.5 versions.)
+	TODO: check
+CVE-2026-57690 (Unauthenticated Cross Site Request Forgery (CSRF) in Werkstatt <= 4.7. ...)
+	TODO: check
+CVE-2026-57689 (Subscriber Broken Access Control in Werkstatt <= 4.7.2 versions.)
+	TODO: check
+CVE-2026-57688 (Unauthenticated Broken Access Control in POS Entegrat\xf6r <= 3.7.103  ...)
+	TODO: check
+CVE-2026-57687 (Contributor SQL Injection in Custom Field Template <= 2.7.8 versions.)
+	TODO: check
+CVE-2026-57686 (Unauthenticated Cross Site Scripting (XSS) in WowAddons <= 1.6.14 vers ...)
+	TODO: check
+CVE-2026-57685 (Subscriber Broken Access Control in Martfury - WooCommerce Marketplace ...)
+	TODO: check
+CVE-2026-57684 (Contributor Cross Site Scripting (XSS) in TheFox <= 3.9.70 versions.)
+	TODO: check
+CVE-2026-57683 (Unauthenticated SQL Injection in WP Fast Total Search <= 1.80.280 vers ...)
+	TODO: check
+CVE-2026-57682 (Unauthenticated Cross Site Scripting (XSS) in Simple Link Directory <= ...)
+	TODO: check
+CVE-2026-57681 (Subscriber Server Side Request Forgery (SSRF) in GeoDirectory <= 2.8.1 ...)
+	TODO: check
+CVE-2026-57680 (Unauthenticated Insecure Direct Object References (IDOR) in Kirki <= 6 ...)
+	TODO: check
+CVE-2026-57679 (Unauthenticated SQL Injection in GeekyBot <= 1.2.5 versions.)
+	TODO: check
+CVE-2026-57678 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-57677 (Unauthenticated PHP Object Injection in Novalnet Payment Gateway for W ...)
+	TODO: check
+CVE-2026-57675 (Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9 ...)
+	TODO: check
+CVE-2026-57674 (Unauthenticated Cross Site Scripting (XSS) in Timetics <= 1.0.58 versi ...)
+	TODO: check
+CVE-2026-57673 (Unauthenticated Cross Site Scripting (XSS) in Optimole <= 4.2.7 versio ...)
+	TODO: check
+CVE-2026-57672 (Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 6.5.1.1  ...)
+	TODO: check
+CVE-2026-57671 (Unauthenticated Cross Site Scripting (XSS) in perfmatters <= 2.6.4 ver ...)
+	TODO: check
+CVE-2026-57670 (Unauthenticated Cross Site Scripting (XSS) in Google Maps CP <= 1.2.5  ...)
+	TODO: check
+CVE-2026-57669 (Subscriber Broken Access Control in Advanced Contact form 7 DB <= 2.0. ...)
+	TODO: check
+CVE-2026-57625 (Unauthenticated Cross Site Scripting (XSS) in Admin and Site Enhanceme ...)
+	TODO: check
+CVE-2026-57624 (Unauthenticated Remote Code Execution (RCE) in Blocksy Companion Pro < ...)
+	TODO: check
+CVE-2026-57623 (Unauthenticated Arbitrary Code Execution in W3 Total Cache <= 2.9.4 ve ...)
+	TODO: check
+CVE-2026-57621 (Unauthenticated PHP Object Injection in Booktics <= 1.0.21 versions.)
+	TODO: check
+CVE-2026-57426 (Unauthenticated Cross Site Scripting (XSS) in Modula - PRO <= 2.10.8 v ...)
+	TODO: check
+CVE-2026-57366 (Unauthenticated Cross Site Scripting (XSS) in WPAdverts <= 2.3.1 versi ...)
+	TODO: check
+CVE-2026-57362 (Unauthenticated Cross Site Scripting (XSS) in ChatBot <= 8.3.2 version ...)
+	TODO: check
+CVE-2026-57361 (Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.2.5  ...)
+	TODO: check
+CVE-2026-57360 (Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalo ...)
+	TODO: check
+CVE-2026-57359 (Unauthenticated Cross Site Scripting (XSS) in ReviewX <= 2.3.10 versio ...)
+	TODO: check
+CVE-2026-57358 (Unauthenticated Cross Site Scripting (XSS) in Customize My Account for ...)
+	TODO: check
+CVE-2026-57357 (Unauthenticated Cross Site Scripting (XSS) in Search Atlas SEO <= 2.6. ...)
+	TODO: check
+CVE-2026-57356 (Unauthenticated Cross Site Scripting (XSS) in MC Woocommerce Wishlist  ...)
+	TODO: check
+CVE-2026-57355 (Subscriber Broken Access Control in Classified Listing <= 5.4.2 versio ...)
+	TODO: check
+CVE-2026-57354 (Subscriber Cross Site Scripting (XSS) in JetReviews <= 3.0.0.1 version ...)
+	TODO: check
+CVE-2026-57353 (Subscriber Broken Access Control in Link Whisper Premium <= 2.9.0 vers ...)
+	TODO: check
+CVE-2026-57352 (Unauthenticated Broken Authentication in ALD \u2013 Dropshipping and F ...)
+	TODO: check
+CVE-2026-57351 (Unauthenticated Cross Site Scripting (XSS) in HandL UTM Grabber <= 2.9 ...)
+	TODO: check
+CVE-2026-57350 (Unauthenticated Cross Site Scripting (XSS) in WP Debugging <= 2.12.2 v ...)
+	TODO: check
+CVE-2026-57349 (Unauthenticated Cross Site Scripting (XSS) in WPeMatico RSS Feed Fetch ...)
+	TODO: check
+CVE-2026-57348 (Unauthenticated Server Side Request Forgery (SSRF) in Paid Member Subs ...)
+	TODO: check
+CVE-2026-57347 (Subscriber Sensitive Data Exposure in Hotel Booking Lite <= 6.0.3 vers ...)
+	TODO: check
+CVE-2026-57345 (Unauthenticated Cross Site Scripting (XSS) in Internal Links Manager < ...)
+	TODO: check
+CVE-2026-57344 (Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 5. ...)
+	TODO: check
+CVE-2026-57343 (Unauthenticated Cross Site Scripting (XSS) in Real Estate 7 <= 3.5.9 v ...)
+	TODO: check
+CVE-2026-57342 (Subscriber Cross Site Scripting (XSS) in ShortPixel Adaptive Images <= ...)
+	TODO: check
+CVE-2026-56842 (A malicious actor with access to the network and under certain conditi ...)
+	TODO: check
+CVE-2026-56841 (A malicious actor with access to the network and low privileges could  ...)
+	TODO: check
+CVE-2026-56037 (Deserialization of Untrusted Data vulnerability in Themify Themify Pop ...)
+	TODO: check
+CVE-2026-56004 (A shellcode injection in the mercurial handler of the obs tar_scm sour ...)
+	TODO: check
+CVE-2026-55952 (The Erlang/OTP ssl application does not validate that the PSK identity ...)
+	TODO: check
+CVE-2026-55950 (Time-of-check Time-of-use (TOCTOU) race condition vulnerability in Erl ...)
+	TODO: check
+CVE-2026-55119 (A malicious actor with access to the network and low privileges could  ...)
+	TODO: check
+CVE-2026-55118 (A malicious actor with access to the network,low privileges and under  ...)
+	TODO: check
+CVE-2026-55117 (A malicious actor with access to the network could exploit a Path Trav ...)
+	TODO: check
+CVE-2026-55116 (A malicious actor with access to the network and under certain network ...)
+	TODO: check
+CVE-2026-55115 (A malicious actor with access to the network and low privileges could  ...)
+	TODO: check
+CVE-2026-55114 (A malicious actor with access to the network and low privileges could  ...)
+	TODO: check
+CVE-2026-55113 (A malicious actor with access to the network could exploit a Server-Si ...)
+	TODO: check
+CVE-2026-55112 (A malicious actor with access to the network and low privileges and un ...)
+	TODO: check
+CVE-2026-55111 (A malicious actor with access to the network could exploit a Path Trav ...)
+	TODO: check
+CVE-2026-55110 (A malicious actor who lures an authenticated user to a malicious page  ...)
+	TODO: check
+CVE-2026-54891 (Improper Enforcement of Message Integrity During Transmission in a Com ...)
+	TODO: check
+CVE-2026-54887 (Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl (DTLS ...)
+	TODO: check
+CVE-2026-54886 (Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability i ...)
+	TODO: check
+CVE-2026-54431 (In liboauth2 the Demonstrating Proof-of-Possession (DPoP) verifier acc ...)
+	TODO: check
+CVE-2026-54430 (liboauth2 is vulnerable to Server-Side Request Forgery inoauth2_jose_j ...)
+	TODO: check
+CVE-2026-54409 (A malicious actor with access to the network and under certain conditi ...)
+	TODO: check
+CVE-2026-54408 (A malicious actor with access to the network could exploit an Improper ...)
+	TODO: check
+CVE-2026-54407 (A malicious actor with access to the network could exploit an Improper ...)
+	TODO: check
+CVE-2026-54406 (A malicious actor with access to the network and high privileges could ...)
+	TODO: check
+CVE-2026-54405 (A malicious actor with access to the network could exploit an Improper ...)
+	TODO: check
+CVE-2026-54404 (A malicious actor with access to the network and low privileges could  ...)
+	TODO: check
+CVE-2026-54403 (A malicious actor with access to the network could exploit a Path Trav ...)
+	TODO: check
+CVE-2026-54402 (A malicious actor with access to the network and low privileges could  ...)
+	TODO: check
+CVE-2026-54401 (A malicious actor with access to the network and low privileges could  ...)
+	TODO: check
+CVE-2026-54400 (A malicious actor with access to the network and high privileges could ...)
+	TODO: check
+CVE-2026-53422 (Observable Response Discrepancy vulnerability in Erlang OTP ssh (ssh_s ...)
+	TODO: check
+CVE-2026-50748 (A malicious actor with access to the network and low privileges could  ...)
+	TODO: check
+CVE-2026-50747 (A malicious actor with access to the network and low privileges could  ...)
+	TODO: check
+CVE-2026-50746 (A malicious actor with access to the network could exploit an Improper ...)
+	TODO: check
+CVE-2026-50282 (Craft CMS is a content management system (CMS). Versions 5.0.0-RC1 and ...)
+	TODO: check
+CVE-2026-50281 (Craft CMS is a content management system (CMS). Versions 5.7.0 and abo ...)
+	TODO: check
+CVE-2026-4772 (Improper neutralization of input during web page generation ('cross-si ...)
+	TODO: check
+CVE-2026-4770 (Improper neutralization of input during web page generation ('cross-si ...)
+	TODO: check
+CVE-2026-4767 (Missing authentication for critical function vulnerability in TR7 Cybe ...)
+	TODO: check
+CVE-2026-49779 (Customer Path Traversal in Tax Exempt for WooCommerce <= 1.9.3 version ...)
+	TODO: check
+CVE-2026-44941 (A relative path traversal in the "keyhint" option in repomd.xml parsin ...)
+	TODO: check
+CVE-2026-44935 (Missing validation of "valuesFrom" references in Helm Deployer of SUSE ...)
+	TODO: check
+CVE-2026-42382 (Unauthenticated Local File Inclusion in Audrey <= 1.5 versions.)
+	TODO: check
+CVE-2026-39448 (Unauthenticated Broken Access Control in NOWPayments for WooCommerce < ...)
+	TODO: check
+CVE-2026-33592 (An unauthenticated remote attacker can exhaust server memory via the F ...)
+	TODO: check
+CVE-2026-27436 (Editor Arbitrary Code Execution in Five Star Business Profile and Sche ...)
+	TODO: check
+CVE-2026-27433 (Unauthenticated Broken Access Control in Motors <= 5.6.80 versions.)
+	TODO: check
+CVE-2026-27430 (Unauthenticated Cross Site Scripting (XSS) in TheFox <= 3.9.76 version ...)
+	TODO: check
+CVE-2026-27426 (Unauthenticated Cross Site Scripting (XSS) in Automotive Car Dealershi ...)
+	TODO: check
+CVE-2026-27425 (Unauthenticated Cross Site Scripting (XSS) in Automotive Listings <= 1 ...)
+	TODO: check
+CVE-2026-27419 (Subscriber Arbitrary File Upload in Zegen <= 1.1.9 versions.)
+	TODO: check
+CVE-2026-27414 (Contributor PHP Object Injection in Werkstatt <= 4.8.3 versions.)
+	TODO: check
+CVE-2026-27412 (Unauthenticated Local File Inclusion in Pearl - Corporate Business <=  ...)
+	TODO: check
+CVE-2026-27408 (Unauthenticated Cross Site Scripting (XSS) in NativeChurch <= 4.8.8.2  ...)
+	TODO: check
+CVE-2026-27404 (Unauthenticated Cross Site Scripting (XSS) in LMS <= 9.7 versions.)
+	TODO: check
+CVE-2026-27402 (Unauthenticated Cross Site Scripting (XSS) in Kids Life | Children Sch ...)
+	TODO: check
+CVE-2026-27060 (Contributor PHP Object Injection in ARMember Premium <= 7.0 versions.)
+	TODO: check
+CVE-2026-14449 (u5CMSthroughv12.8.8 is vulnerable to reflected XSS via the \u2018thank ...)
+	TODO: check
+CVE-2026-14336 (PIA's OIDC issuer allowlist for Jenkins tokens uses a bare string-pref ...)
+	TODO: check
+CVE-2026-14029 (The Groundhogg \u2014 CRM, Newsletters, and Marketing Automation plugi ...)
+	TODO: check
+CVE-2026-13743 (CubeSpace CW0057 Reaction Wheel firmware versions prior to 5.0.20 are  ...)
+	TODO: check
+CVE-2026-13459 (The JetFormBuilder \u2014 Dynamic Blocks Form Builder plugin for WordP ...)
+	TODO: check
+CVE-2026-13369 (The Ninja Forms - File Uploads plugin for WordPress is vulnerable to A ...)
+	TODO: check
+CVE-2026-13252 (The RSS Aggregator by Feedzy \u2013 Feed to Post, Autoblogging, News & ...)
+	TODO: check
+CVE-2026-13251 (The Perfmatters plugin for WordPress is vulnerable to Directory Traver ...)
+	TODO: check
+CVE-2026-12657 (The LatePoint \u2013 Calendar Booking Plugin for Appointments and Even ...)
+	TODO: check
+CVE-2026-12472 (The Kirki \u2013 Freeform Page Builder, Website Builder & Customizer p ...)
+	TODO: check
+CVE-2026-12168 (An improper validation vulnerability for driver `GFAC_Sys_x64.sys` in  ...)
+	TODO: check
+CVE-2026-12167 (The Minifilter communication port for driver `GFAC_Sys_x64.sys` in Lit ...)
+	TODO: check
+CVE-2026-12166 (A NULL pointer dereference vulnerability for driver `GFAC_Sys_x64.sys` ...)
+	TODO: check
+CVE-2026-12134 (The JoomSport \u2013 for Sports: Team & League, Football, Hockey & mor ...)
+	TODO: check
+CVE-2026-12122 (The Kirki \u2013 Freeform Page Builder, Website Builder & Customizer p ...)
+	TODO: check
+CVE-2026-11946 (An unauthenticated remote attacker can exhaust server memory via the G ...)
+	TODO: check
+CVE-2026-11896 (The My Calendar \u2013 Accessible Event Manager plugin for WordPress i ...)
+	TODO: check
+CVE-2026-10104 (The Product Video Gallery for Woocommerce plugin for WordPress is vuln ...)
+	TODO: check
+CVE-2025-69156 (Unauthenticated Cross Site Scripting (XSS) in Kids Zone - Children Wor ...)
+	TODO: check
+CVE-2025-69155 (Unauthenticated Cross Site Scripting (XSS) in Fitness Zone WordPress T ...)
+	TODO: check
+CVE-2025-69154 (Unauthenticated Cross Site Scripting (XSS) in SpaLab | Beauty Salon Wo ...)
+	TODO: check
+CVE-2025-69153 (Unauthenticated Cross Site Scripting (XSS) in Trendy Travel <= 6.7 ver ...)
+	TODO: check
+CVE-2025-69152 (Unauthenticated Cross Site Scripting (XSS) in Artale | Wedding Photogr ...)
+	TODO: check
+CVE-2025-69134 (Unauthenticated Arbitrary Content Deletion in OpenAI Chatbot for WordP ...)
+	TODO: check
+CVE-2025-69133 (Subscriber Local File Inclusion in Tourmaster <= 5.4.5 versions.)
+	TODO: check
+CVE-2025-69132 (Subscriber Sensitive Data Exposure in Corpkit <= 1.0.5 versions.)
+	TODO: check
+CVE-2025-69094 (Subscriber SQL Injection in Unicamp <= 2.2.2 versions.)
+	TODO: check
+CVE-2025-66076 (Unauthenticated Broken Access Control in Woostify Sites Library <= 1.6 ...)
+	TODO: check
+CVE-2025-58902 (Unauthenticated Local File Inclusion in Lighthouse <= 1.2.12 versions.)
+	TODO: check
+CVE-2024-58352 (Landray OA contains an unauthenticated HQL injection vulnerability tha ...)
+	TODO: check
+CVE-2024-14037 (Redsea Cloud eHR contains an arbitrary file upload vulnerability that  ...)
+	TODO: check
+CVE-2022-50973 (Yonyou KSOA 9.0 contains an unauthenticated arbitrary file upload vuln ...)
+	TODO: check
+CVE-2026-53358 (In the Linux kernel, the following vulnerability has been resolved:  B ...)
 	- linux 7.0.12-1
 	[trixie] - linux 6.12.94-1
 	NOTE: https://git.kernel.org/linus/8c8e620467a7b51562dbcefbd1f09f288d7d710d (7.1-rc6)
-CVE-2026-53357 [Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()]
+CVE-2026-53357 (In the Linux kernel, the following vulnerability has been resolved:  B ...)
 	- linux 7.0.12-1
 	[trixie] - linux 6.12.94-1
 	NOTE: https://git.kernel.org/linus/ab1513597c6cf17cd1ad2a21e3b045421b48e022 (7.1-rc5)
@@ -176847,7 +177199,7 @@ CVE-2025-27463
 CVE-2025-27462
 	NOT-FOR-US: Windows XenCons WinPVDriver
 	NOTE: https://xenbits.xen.org/xsa/advisory-468.html
-CVE-2025-5276 (All versions of the package mcp-markdownify-server are vulnerable to S ...)
+CVE-2025-5276 (Versions of the package mcp-markdownify-server before 1.0.0 are vulner ...)
 	NOT-FOR-US: mcp-markdownify-server
 CVE-2025-5273 (All versions of the package mcp-markdownify-server are vulnerable to F ...)
 	NOT-FOR-US: mcp-markdownify-server
@@ -508026,7 +508378,7 @@ CVE-2021-34434 (In Eclipse Mosquitto versions 2.0 to 2.0.11, when using the dyna
 	NOTE: Fixed by: https://github.com/eclipse/mosquitto/commit/32af599c81e63fa38e834b8f1c1f108c49328e95 (v2.0.12)
 CVE-2021-34433 (In Eclipse Californium version 2.0.0 to 2.6.4 and 3.0.0-M1 to 3.0.0-M3 ...)
 	NOT-FOR-US: Eclipse Californium
-CVE-2021-34432 (In Eclipse Mosquitto versions 2.07 and earlier, the server will crash  ...)
+CVE-2021-34432 (In Eclipse Mosquitto versions 2.0.7 and earlier, the server will crash ...)
 	- mosquitto 2.0.8-1
 	[buster] - mosquitto <ignored> (Vulnerable code is not accessible in version 1.x)
 	[stretch] - mosquitto <ignored> (Vulnerable code is not accessible in version 1.x)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cbef361db2f7666178c47d434de15ee8786f281e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cbef361db2f7666178c47d434de15ee8786f281e
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260702/447e6b0e/attachment-0001.htm>

More information about the debian-security-tracker-commits mailing list