[Git][security-tracker-team/security-tracker][master] Add CVE-2026-54659/ruby-pagy

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a7db8726 by Salvatore Bonaccorso at 2026-07-29T09:51:12+02:00
Add CVE-2026-54659/ruby-pagy

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -97,7 +97,10 @@ CVE-2026-54691 (datamodel-code-generator generates Python data models from schem
 CVE-2026-54690 (datamodel-code-generator generates Pydantic v2 models, dataclasses, Ty ...)
 	NOT-FOR-US: datamodel-code-generator
 CVE-2026-54659 (Pagy is agnostic pagination in plain Ruby. From 43.0.0 until 43.5.6, P ...)
-	TODO: check
+	- ruby-pagy <not-affected> (Fixed with initial upload to Debian)
+	NOTE: https://github.com/ddnexus/pagy/security/advisories/GHSA-2xmw-f8j8-wfxc
+	NOTE: https://github.com/ddnexus/pagy/pull/908
+	NOTE: Fixed by: https://github.com/ddnexus/pagy/commit/efcf09690e9fa7d7abdfb987b785a55f87e287df (43.5.6)
 CVE-2026-54658 (Hypequery is a TypeScript semantic layer for ClickHouse. Prior to 2.0. ...)
 	TODO: check
 CVE-2026-54656 (datamodel-code-generator generates Pydantic v2 models, dataclasses, Ty ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a7db8726c14f243c562108488fc2edc8957fca1f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a7db8726c14f243c562108488fc2edc8957fca1f
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260729/9abc6b60/attachment.htm>