[Git][security-tracker-team/security-tracker][master] Add CVE-2026-59102/Forgejo

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
cbb3d40b by Salvatore Bonaccorso at 2026-07-03T10:02:00+02:00
Add CVE-2026-59102/Forgejo

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -13,7 +13,7 @@ CVE-2026-8489 (The Ultimate Member \u2013 User Profile, Registration, Login, Mem
 CVE-2026-8247 (An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may all ...)
 	NOT-FOR-US: WatchGuard
 CVE-2026-59102 (Forgejo before 15.0.3 contains a stored cross-site scripting vulnerabi ...)
-	TODO: check
+	- forgejo <itp> (bug #1058932)
 CVE-2026-59101 (AutoBangumi before 3.2.8 contains a server-side request forgery (SSRF) ...)
 	TODO: check
 CVE-2026-59100 (LobeChat through 2.2.9 contains a broken object level authorization vu ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cbb3d40beaed3b1c9a1d5cddcd3fca8b4af1e4ca

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cbb3d40beaed3b1c9a1d5cddcd3fca8b4af1e4ca
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260703/e65a9aaf/attachment-0001.htm>