[Git][security-tracker-team/security-tracker][master] graphql-core n/a

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5ce9ae5a by Moritz Muehlenhoff at 2026-11-01T22:57:33+01:00
graphql-core n/a

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1636,7 +1636,12 @@ CVE-2026-119325 (Bricks Theme 2.4 and before for WordPress contains an unauthent
 CVE-2026-119317 (On Linux, an authenticated, low-privileged Nessus user with scan-creat ...)
 	TODO: check
 CVE-2026-119286 (GraphQL-core is a Python port of the GraphQL.js reference implementati ...)
-	TODO: check
+	- graphql-core <not-affected> (Vulnerable code not present)
+	NOTE: https://github.com/graphql-python/graphql-core/security/advisories/GHSA-mpqx-q82w-9x46
+	NOTE: https://github.com/graphql-python/graphql-core/issues/287
+	NOTE: https://github.com/graphql-python/graphql-core/pull/288	
+	NOTE: Introduced by: https://github.com/graphql-python/graphql-core/commit/aab6d5020c1ed741fa41c2db3e7f78b8654035ce (v3.3.0a3)
+	NOTE: Fixed by: https://github.com/graphql-python/graphql-core/commit/3c319fd9f4b8f6c9db4189520561bf8dd0e70be9 (v3.3.1)
 CVE-2026-119285 (Fiber is an Express inspired web framework written in Go. From 2.52.1  ...)
 	TODO: check
 CVE-2026-119284 (joserfc is a Python library that provides an implementation of several ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5ce9ae5a5e961d5a359d1bf00609ab75d51500cc

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5ce9ae5a5e961d5a359d1bf00609ab75d51500cc
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261101/8b1f37b9/attachment.htm>