[Git][security-tracker-team/security-tracker][master] bogus CVE for dokuwiki

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
95fb7bd2 by Moritz Muehlenhoff at 2026-07-03T09:53:34+02:00
bogus CVE for dokuwiki

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1712,7 +1712,8 @@ CVE-2026-44040 (UltraVNC through 1.8.2.2 uses a cryptographically weak pseudo-ra
 CVE-2026-3602 (IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 thr ...)
 	NOT-FOR-US: IBM
 CVE-2026-37106 (An issue in DokuWiki 2025-05-14b "Librarian" 56.2 allows a remote atta ...)
-	TODO: check
+	NOTE: Bogus CVE assignment for DokuWiki
+	NOTE: https://github.com/dokuwiki/dokuwiki/issues/4682
 CVE-2026-35505 (An unauthenticated remote attacker can repeatedly send crafted connect ...)
 	TODO: check
 CVE-2026-2387 (The Event Organiser plugin for WordPress is vulnerable to Stored Cross ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/95fb7bd23f8e47ab67e41911475bb38c7502c8d7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/95fb7bd23f8e47ab67e41911475bb38c7502c8d7
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260703/8176354e/attachment.htm>