[Git][security-tracker-team/security-tracker][master] Add new ghost issues, itp'ed

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
34e16228 by Salvatore Bonaccorso at 2026-10-01T22:22:48+02:00
Add new ghost issues, itp'ed

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -346,57 +346,57 @@ CVE-2026-103338 (Improper Neutralization of Special Elements used in an SQL Comm
 CVE-2026-103336 (Insertion of Sensitive Information Into Sent Data vulnerability in Sma ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-103292 (Ghost versions from 0.5.3 through versions prior to 6.50.0 fail to san ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-103291 (Ghost versions from 3.20.2 before 6.51.0 contain a server-side request ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-103290 (Ghost versions 6.14.0 through versions prior to 6.27.0 contain a path  ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-103289 (Ghost from 5.9.0 before 6.44.1 contains an input validation issue in t ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-103288 (Ghost, an open-source publishing platform, contains an input validatio ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-103287 (Ghost versions 1.18.0 before 6.27.0 contain a server-side request forg ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-103286 (Ghost versions from 2.21.0 before 6.56.0 contain a privilege escalatio ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-103285 (Ghost versions from 5.19.0 before 6.57.1 contain a cross-site request  ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-103284 (Ghost versions from 5.125.1 before 6.57.1 contain an information discl ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-103283 (Ghost versions 6.20.0 before 6.57.1 contain a session handling vulnera ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-103282 (Ghost versions 0.5.0 before 6.23.0 contain a concurrency issue in the  ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-103281 (Ghost (npm package 'ghost') versions from 3.23.0 up to, but not includ ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-103280 (Ghost from version 0.8.0 before 6.23.0 contains an information disclos ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-103279 (Ghost versions from 3.10.0 before 6.34.0 fail to fully invalidate all  ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-103278 (Ghost versions 5.8.0 before 6.34.0 contain an input validation vulnera ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-103277 (Ghost versions from 2.5.0 before 6.34.0 contain an untrusted script ex ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-103276 (Ghost versions before 6.20.0 contain a file extension filtering bypass ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-103275 (Ghost 5.42.2 before 6.58.0 contains an information disclosure vulnerab ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-103274 (Ghost versions 5.3.0 before 6.58.0 fail to properly enforce access con ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-103273 (Ghost versions 4.3.0 before 6.58.0 contain an authentication bypass vu ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-103272 (Ghost versions from 2.10.0 before 6.63.0 contain a staff enumeration v ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-103271 (Ghost versions from 4.0.0 before 6.63.0 contain a content API vulnerab ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-103269 (Ghost versions 5.3.0 before 6.62.0 contain a missing authorization vul ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-103268 (Ghost versions before 6.62.0 contain an authentication bypass vulnerab ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-103267 (Ghost versions before 6.62.0 contain an authentication bypass vulnerab ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-103266 (Ghost versions 5.2.0 through versions prior to 6.62.0 allow a remote a ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-103265 (Fleet versions before 4.89.0 fail to properly filter MDM command resul ...)
 	NOT-FOR-US: Fleet
 CVE-2026-103264 (Fleet versions before 4.87.0 contain an authentication bypass vulnerab ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/34e1622839ef014d6397ac446df279fb699cbd5c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/34e1622839ef014d6397ac446df279fb699cbd5c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261001/24b4dfa3/attachment-0001.htm>