[Git][security-tracker-team/security-tracker][master] Process new ghost issues, itp'ed

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e4c9af7f by Salvatore Bonaccorso at 2026-10-02T22:24:06+02:00
Process new ghost issues, itp'ed

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -546,21 +546,21 @@ CVE-2026-104420 (Zebra before 6.3.0 contains a protection mechanism failure that
 CVE-2026-104419 (Zebra (zebrad) 4.5.0 before 6.3.0 discards which peer supplied the blo ...)
 	TODO: check
 CVE-2026-104418 (Ghost from 6.10.3 before 6.64.0 contains a remote code execution vulne ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-104417 (Ghost from 1.20.0 before 6.64.0 contains a path traversal vulnerabilit ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-104416 (Ghost from 4.39.0 before 6.64.0 contains an information disclosure vul ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-104415 (Ghost from 0.7.2 before 6.64.0 contains an information disclosure vuln ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-104414 (Ghost from 2.5.0 before 6.64.0 contains a stored cross-site scripting  ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-104413 (Ghost from 5.94.0 before 6.64.0 contains a stored cross-site scripting ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-104412 (Ghost 0.5.0 before 6.64.0 does not correctly restrict staff role assig ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-104411 (Ghost from 6.22.1 before 6.64.0 contains a stored cross-site scripting ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-104410 (SiYuan before 3.8.5 contains an information disclosure vulnerability t ...)
 	NOT-FOR-US: SiYuan
 CVE-2026-104403 (Authorization Bypass Through User-Controlled Key vulnerability in Thim ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e4c9af7f4fae7b1d21e898eec8bdd45ba5254b31

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e4c9af7f4fae7b1d21e898eec8bdd45ba5254b31
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261002/641ff391/attachment.htm>