[Git][security-tracker-team/security-tracker][master] Add new cjson issues
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Jul 29 21:48:22 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
4cee12c3 by Salvatore Bonaccorso at 2026-07-29T22:48:06+02:00
Add new cjson issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -27,11 +27,14 @@ CVE-2026-67425 (Flyto2 Core is an execution kernel for automation and AI-agent w
CVE-2026-67424 (Flyto2 Core is an execution kernel for automation and AI-agent workflo ...)
NOT-FOR-US: Flyto2 Core
CVE-2026-67217 (cJSON through 1.7.19 applies RFC 6902 JSON Patch operations non-atomic ...)
- TODO: check
+ - cjson <unfixed>
+ NOTE: https://joshua.hu/cjson-json-parser-cve-vulnerabilities
CVE-2026-67216 (cJSON through 1.7.19 contains an inefficient algorithmic complexity fl ...)
- TODO: check
+ - cjson <unfixed>
+ NOTE: https://joshua.hu/cjson-json-parser-cve-vulnerabilities
CVE-2026-67215 (cJSON through 1.7.19 is vulnerable to uncontrolled recursion leading t ...)
- TODO: check
+ - cjson <unfixed>
+ NOTE: https://joshua.hu/cjson-json-parser-cve-vulnerabilities
CVE-2026-67214 (nanoid (Nano ID) before 5.1.16 contains an infinite loop in the custom ...)
TODO: check
CVE-2026-67213 (nanoid (Nano ID) before 5.1.6 contains an infinite loop in the customA ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4cee12c3cbd3d3860f1e48d524a15c5b4e9dd4e5
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4cee12c3cbd3d3860f1e48d524a15c5b4e9dd4e5
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260729/5abf2e92/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list