[Git][security-tracker-team/security-tracker][master] Add CVE-2026-39850/yii, itp'ed

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a34d4f23 by Salvatore Bonaccorso at 2026-05-21T21:43:12+02:00
Add CVE-2026-39850/yii, itp'ed

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -469,7 +469,7 @@ CVE-2026-40092 (nimiq-blockchain provides persistent block storage for Nimiq's R
 CVE-2026-39960 (Mantis Bug Tracker (MantisBT) is an open source issue tracker. Version ...)
 	- mantis <removed>
 CVE-2026-39850 (Yii 2 is a PHP application framework. Versions 2.0.54 and prior contai ...)
-	TODO: check
+	- yii <itp> (bug #597899)
 CVE-2026-39405 (Frappe Learning Management System (LMS) is a learning system that help ...)
 	NOT-FOR-US: Frappe Learning Management System (LMS)
 CVE-2026-39352 (Frappe is a full-stack web application framework. Versions prior to 15 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a34d4f23c9b3f80642a2ffb59ea10b5a8aefc440

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a34d4f23c9b3f80642a2ffb59ea10b5a8aefc440
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260521/990cd2ea/attachment.htm>