[Git][security-tracker-team/security-tracker][master] add reference for CVE-2026-84968

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0682915e by Moritz Muehlenhoff at 2026-10-02T16:55:00+02:00
add reference for CVE-2026-84968

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -40243,6 +40243,7 @@ CVE-2026-84968 (An out-of-bounds read in the BSON decoding component of the Mong
 	[trixie] - php-mongodb <no-dsa> (Minor issue)
 	[bookworm] - php-mongodb <postponed> (Minor issue, infoleak)
 	NOTE: https://jira.mongodb.org/browse/PHPC-2744
+	NOTE: https://github.com/mongodb/mongo-php-driver/security/advisories/GHSA-j5wj-7mj9-v673
 	NOTE: Fixed by: https://github.com/mongodb/mongo-php-driver/commit/44f68614e0a859a0d880811e3f93c2a02330c565 (2.5.1)
 CVE-2026-84967 (A component of the MongoDB extension for Visual Studio Code does not n ...)
 	NOT-FOR-US: MongoDB extension for Visual Studio Code



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0682915ec3ff75c1901ad14d6bcd61fdc7384e29

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0682915ec3ff75c1901ad14d6bcd61fdc7384e29
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261002/2153ceac/attachment.htm>