[Git][security-tracker-team/security-tracker][master] Add two dasel issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sat Jul 18 15:29:06 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9323192b by Salvatore Bonaccorso at 2026-07-18T16:28:44+02:00
Add two dasel issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -834,9 +834,13 @@ CVE-2026-46512 (Frogman provides headless PBX control through MCP and HTTP API.
 CVE-2026-46404 (BigBlueButton is an open-source virtual classroom. Prior to 3.0.23, th ...)
 	NOT-FOR-US: BigBlueButton
 CVE-2026-46378 (Dasel is a command-line tool and library for querying, modifying, and  ...)
-	TODO: check
+	- dasel 3.11.0-1
+	NOTE: https://github.com/TomWright/dasel/security/advisories/GHSA-m6xr-fvfg-5g64
+	NOTE: Fixed by: https://github.com/TomWright/dasel/commit/95f8dd3af12958bf6ca2a737b3ec0267280f86ed (v3.10.1)
 CVE-2026-46377 (Dasel is a command-line tool and library for querying, modifying, and  ...)
-	TODO: check
+	- dasel 3.11.0-1
+	NOTE: https://github.com/TomWright/dasel/security/advisories/GHSA-m5j3-4634-c2vq
+	NOTE: Fixed by: https://github.com/TomWright/dasel/commit/5fc1172287df89860caf139b146007d7ed12178c (v3.10.1)
 CVE-2026-46353 (BigBlueButton is an open-source virtual classroom. Prior to 3.0.21, bb ...)
 	NOT-FOR-US: BigBlueButton
 CVE-2026-46351 (BigBlueButton is an open-source virtual classroom. Prior to 3.0.21, bb ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9323192b64c9e950400df8ede7671d529c322955

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9323192b64c9e950400df8ede7671d529c322955
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260718/ad1b2c70/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list