[Git][security-tracker-team/security-tracker][master] Add CVE-2026-116675/tinymce

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8b4eed1e by Salvatore Bonaccorso at 2026-11-02T20:57:55+01:00
Add CVE-2026-116675/tinymce

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -8026,7 +8026,9 @@ CVE-2026-116677 (OpenWISP Controller is a network and WiFi controller for provis
 CVE-2026-116676 (Atlantis is a self-hosted golang application that listens for Terrafor ...)
 	NOT-FOR-US: Atlantis
 CVE-2026-116675 (TinyMCE is an open source rich text editor. From 7.9.3 until 7.9.4 and ...)
-	TODO: check
+	- tinymce <removed>
+	NOTE: https://github.com/tinymce/tinymce/security/advisories/GHSA-mf2p-h6hf-fcwm
+	NOTE: Fixed by: https://github.com/tinymce/tinymce/commit/bd1ab5ef024c648c3f9c0b409e54a6c227c7d8a2 (8.9.3)
 CVE-2026-116674 (systeminformation is a System and OS information library for node.js.  ...)
 	- node-systeminformation <unfixed>
 	NOTE: https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-7648-jmwf-vw7j



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8b4eed1e4af1df8993cd9fe483000f3198cc3484

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8b4eed1e4af1df8993cd9fe483000f3198cc3484
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261102/2bd0f684/attachment.htm>