[Git][security-tracker-team/security-tracker][master] Process two firefox issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu Jun 18 07:11:00 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
284683f1 by Salvatore Bonaccorso at 2026-06-18T08:10:52+02:00
Process two firefox issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1557,9 +1557,9 @@ CVE-2026-54191 (Unauthenticated Cross Site Scripting (XSS) in Pods <= 3.3.8 vers
 CVE-2026-54190 (Unauthenticated Broken Access Control in Envira Photo Gallery <= 1.12. ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-53900 (Firefox for iOS preserved cookies set on the initial PDF request acros ...)
-	TODO: check
+	- firefox <not-affected> (Only affects Firefox for iOS)
 CVE-2026-53899 (Firefox for iOS used partial domain matching when attaching cookies to ...)
-	TODO: check
+	- firefox <not-affected> (Only affects Firefox for iOS)
 CVE-2026-53866 (OpenClaw before 2026.5.12 contains an allowlist bypass vulnerability i ...)
 	NOT-FOR-US: OpenClaw
 CVE-2026-53865 (OpenClaw before 2026.5.2 contains a path traversal vulnerability in ma ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/284683f122ad9041ba65e84f71222ce8f94bc5dc

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/284683f122ad9041ba65e84f71222ce8f94bc5dc
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260618/579f084a/attachment.htm>


More information about the debian-security-tracker-commits mailing list