[Git][security-tracker-team/security-tracker][master] Associate three older CVEs with gleam, itp'ed

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c112efba by Salvatore Bonaccorso at 2026-07-29T23:07:12+02:00
Associate three older CVEs with gleam, itp'ed

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -46076,9 +46076,9 @@ CVE-2026-45080 (Klaw is a self-service Apache Kafka Topic Management/Governance
 CVE-2026-44367 (Klaw is a self-service Apache Kafka Topic Management/Governance tool/p ...)
 	NOT-FOR-US: Klaw
 CVE-2026-43965 (Path traversal vulnerability in Gleam's dependency management allows a ...)
-	NOT-FOR-US: Gleam
+	- gleam <itp> (bug #1103795)
 CVE-2026-42795 (Symlink following vulnerability in Gleam's Hex package export allows f ...)
-	NOT-FOR-US: Gleam
+	- gleam <itp> (bug #1103795)
 CVE-2026-42685 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-42684 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
@@ -46151,7 +46151,7 @@ CVE-2026-33398 (NamelessMC is website software for Minecraft servers. In version
 CVE-2026-33244 (React Router is a router for React. In versions 7.5.1 through 7.13.1,  ...)
 	NOT-FOR-US: React Router
 CVE-2026-32685 (Path traversal vulnerability in Gleam's handling of custom documentati ...)
-	NOT-FOR-US: Gleam
+	- gleam <itp> (bug #1103795)
 CVE-2026-32250 (NamelessMC is website software for Minecraft servers. A Reflected Cros ...)
 	NOT-FOR-US: NamelessMC
 CVE-2026-30652 (A remote buffer overflow vulnerability exists in the /cgi-bin/dido/set ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c112efba3346977d91e9790e14a9f59c4f607a54

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c112efba3346977d91e9790e14a9f59c4f607a54
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260729/03266a55/attachment.htm>