[Git][security-tracker-team/security-tracker][master] Add CVE-2026-4985/cgif

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
286b38dd by Salvatore Bonaccorso at 2026-03-28T09:28:35+01:00
Add CVE-2026-4985/cgif

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -19,7 +19,9 @@ CVE-2026-4988 (A security flaw has been discovered in Open5GS 2.7.6. This issue
 CVE-2026-4987 (The SureForms \u2013 Contact Form, Payment Form & Other Custom Form Bu ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-4985 (A vulnerability was identified in dloebl CGIF up to 0.5.2. This vulner ...)
-	TODO: check
+	- cgif <unfixed>
+	NOTE: https://github.com/dloebl/cgif/issues/110
+	NOTE: https://github.com/dloebl/cgif/pull/112
 CVE-2026-4984 (The Twilio integration webhook handler accepts any POST request withou ...)
 	NOT-FOR-US: botpress
 CVE-2026-4982 (A user with permission "update world" in any Venueless world is able t ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/286b38dd08345bedb4d0e45044f5c14a9b9d5d9d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/286b38dd08345bedb4d0e45044f5c14a9b9d5d9d
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260328/df83a8ae/attachment.htm>