[Git][security-tracker-team/security-tracker][master] new phpmyadmin issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ab94cc34 by Moritz Muehlenhoff at 2026-11-04T12:42:59+01:00
new phpmyadmin issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4235,13 +4235,17 @@ CVE-2026-119479 (Improper Neutralization of Script-Related HTML Tags in a Web Pa
 CVE-2026-119466 (Cross-Site Request Forgery (CSRF) vulnerability in WPExperts APIExpert ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-119429 (phpMyAdmin through 5.2.3 contains a missing re-authentication vulnerab ...)
-	TODO: check
+	- phpmyadmin <unfixed>
+	NOTE: https://github.com/phpmyadmin/phpmyadmin/pull/19087
 CVE-2026-119428 (phpMyAdmin through 5.2.3 contains a server-side request forgery vulner ...)
-	TODO: check
+	- phpmyadmin <unfixed>
+	NOTE: https://github.com/phpmyadmin/phpmyadmin/pull/19156
 CVE-2026-119427 (phpMyAdmin through 5.2.3 contains an sql injection vulnerability in De ...)
-	TODO: check
+	- phpmyadmin <unfixed>
+	NOTE: https://github.com/phpmyadmin/phpmyadmin/pull/18698
 CVE-2026-119426 (phpMyAdmin through 5.2.3 contains a cross-site request forgery vulnera ...)
-	TODO: check
+	- phpmyadmin <unfixed>
+	NOTE: https://github.com/phpmyadmin/phpmyadmin/pull/20569
 CVE-2026-119425 (OPNsense core 26.1.6 through 26.7.7 contains an authentication bypass  ...)
 	NOT-FOR-US: OPNsense
 CVE-2026-119424 (OPNsense core before 26.7.8 contains a configuration line injection vu ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ab94cc343a0e31620f278f31309c1e17d174e27f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ab94cc343a0e31620f278f31309c1e17d174e27f
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261104/d001a818/attachment.htm>