[Git][security-tracker-team/security-tracker][master] Add new misp issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
be0586be by Salvatore Bonaccorso at 2026-10-01T22:08:16+02:00
Add new misp issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -265,7 +265,7 @@ CVE-2026-103921 (GraphQL Tools provides utilities for building, stitching, and m
 CVE-2026-103884 (A flaw was found in the X.509 client certificate authenticator of Keyc ...)
 	TODO: check
 CVE-2026-103858 (MISP contains an incomplete authorization check in the discussion post ...)
-	TODO: check
+	- misp <itp> (bug #1144317)
 CVE-2026-103758 (Obot 0.21.1 through 0.24.1 contains an authorization bypass vulnerabil ...)
 	NOT-FOR-US: Obot
 CVE-2026-103757 (Budibase through 3.41.0 contains a server-side request forgery vulnera ...)
@@ -287,17 +287,17 @@ CVE-2026-103679 (A flaw was found in tnef. A remote attacker could exploit this
 CVE-2026-103678 (A flaw was found in tnef. An attacker can exploit this vulnerability b ...)
 	TODO: check
 CVE-2026-103664 (MISP contains a reflected cross-site scripting (XSS) vulnerability in  ...)
-	TODO: check
+	- misp <itp> (bug #1144317)
 CVE-2026-103662 (MISP contains a reflected cross-site scripting (XSS) vulnerability in  ...)
-	TODO: check
+	- misp <itp> (bug #1144317)
 CVE-2026-103659 (MISP contains an authorization bypass in the event flattening feature. ...)
-	TODO: check
+	- misp <itp> (bug #1144317)
 CVE-2026-103656
 	REJECTED
 CVE-2026-103655 (MISP contains a vulnerability in its two-factor authentication (TOTP)  ...)
-	TODO: check
+	- misp <itp> (bug #1144317)
 CVE-2026-103651 (MISP contains a vulnerability in its one-time password (OTP) authentic ...)
-	TODO: check
+	- misp <itp> (bug #1144317)
 CVE-2026-103505 (Improper neutralization of argument delimiters in the volume handling  ...)
 	NOT-FOR-US: Amazon
 CVE-2026-103497 (In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the Gi ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/be0586be1abcc77be5256e641443dfa54a23786c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/be0586be1abcc77be5256e641443dfa54a23786c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261001/9a90e013/attachment.htm>