[Git][security-tracker-team/security-tracker][master] python-engineio fixed in sid

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
031d9cc4 by Moritz Muehlenhoff at 2026-10-02T20:05:19+02:00
python-engineio fixed in sid

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -70869,16 +70869,17 @@ CVE-2026-50058 (A vulnerability has been identified in Solid Edge SE2025 (All ve
 CVE-2026-49179 (Improper neutralization of special elements used in a command ('comman ...)
 	NOT-FOR-US: Microsoft
 CVE-2026-48809 (python-engineio is a Python implementation of the Engine.IO realtime c ...)
-	- python-engineio <unfixed> (bug #1144516)
+	- python-engineio 4.14.0-1 (bug #1144516)
 	[trixie] - python-engineio <no-dsa> (Minor issue)
 	[bookworm] - python-engineio <postponed> (Minor issue)
 	NOTE: https://github.com/miguelgrinberg/python-engineio/security/advisories/GHSA-m9gh-vj53-gvh9
-	TODO: checking upstream commit fixing issue, confusing infomation advisory claims both 4.13.2 and 4.13.5 to fix issue
+	NOTE: https://github.com/miguelgrinberg/python-engineio/commit/fc5e2f07f78a47f6442ae1ec64795ff8b6242784 (v4.13.5)
 CVE-2026-48802 (python-engineio is a Python implementation of the Engine.IO realtime c ...)
-	- python-engineio <unfixed> (bug #1144517)
+	- python-engineio 4.14.0-1 (bug #1144517)
 	[trixie] - python-engineio <no-dsa> (Minor issue)
 	[bookworm] - python-engineio <postponed> (Minor issue)
 	NOTE: https://github.com/miguelgrinberg/python-engineio/security/advisories/GHSA-cgwc-pv48-fhj5
+	NOTE: https://github.com/miguelgrinberg/python-engineio/commit/ceeeb5eae3ce070f4c5e313ea9a1f91307fe5e2b (v4.13.2)
 CVE-2026-48790 (Turso CLI is the command line interface (CLI) to the open-source datab ...)
 	NOT-FOR-US: Turso CLI
 CVE-2026-48771 (ishankportfolio is a portfolio website. Prior to version 1.0.1, contac ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/031d9cc442bf49a8230faa0036eaa81a9fe0f356

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/031d9cc442bf49a8230faa0036eaa81a9fe0f356
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261002/4a1afd3d/attachment.htm>