[Git][security-tracker-team/security-tracker][master] Add new CVEs for Zulip

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
63acc461 by Salvatore Bonaccorso at 2026-11-04T20:58:53+01:00
Add new CVEs for Zulip

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,7 +1,7 @@
 CVE-2026-97705 (Moleculer is a progressive microservices framework for Node.js. Prior  ...)
 	TODO: check
 CVE-2026-97701 (Zulip is an open-source team collaboration tool. In Zulip Server versi ...)
-	TODO: check
+	- zulip-server <itp> (bug #800052)
 CVE-2026-97397 (The Remove Google Fonts \u2013 Disable, Block, or Replace with Bunny F ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-95649 (IRISPowerscan insufficiently restrict the use of untrusted scripts. An ...)
@@ -207,11 +207,11 @@ CVE-2026-118513 (Authentication bypass by spoofing inX509AuthenticatorandX509Aut
 CVE-2026-118391 (Allocation of Resources Without Limits or Throttling vulnerability in  ...)
 	TODO: check
 CVE-2026-115574 (Zulip is an open-source team collaboration tool. From 11.0 until 12.2, ...)
-	TODO: check
+	- zulip-server <itp> (bug #800052)
 CVE-2026-115498 (The Slim Jetpack plugin for WordPress is vulnerable to Stored Cross-Si ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-115474 (Zulip is an open-source team collaboration tool. From 8.0 until 12.2,  ...)
-	TODO: check
+	- zulip-server <itp> (bug #800052)
 CVE-2026-115448 (Uncontrolled recursion in Apache ZooKeeper. The server serializes its  ...)
 	TODO: check
 CVE-2026-114456 (Multiple Snowflake client drivers implementing the `authenticator=exte ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/63acc46116c4f161a1a96e6228c604364229e809

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/63acc46116c4f161a1a96e6228c604364229e809
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261104/1d52bc29/attachment.htm>