[Git][security-tracker-team/security-tracker][master] new fsspec issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c3c44a2e by Moritz Muehlenhoff at 2026-10-03T00:57:20+02:00
new fsspec issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -439,7 +439,10 @@ CVE-2026-104854 (Nx is a monorepo solution for TypeScript and polyglot codebases
 CVE-2026-104853 (Nx is a monorepo solution for TypeScript and polyglot codebases. From  ...)
 	NOT-FOR-US: Nx
 CVE-2026-104851 (fsspec is a specification and Python implementation framework for file ...)
-	TODO: check
+	- fsspec <unfixed>
+	NOTE: https://github.com/fsspec/filesystem_spec/security/advisories/GHSA-27vj-qcqg-25rc
+	NOTE: https://github.com/fsspec/filesystem_spec/commit/86438783f93b1398ef245b92f0e6063b445b611c (2026.6.0)
+	NOTE: https://github.com/fsspec/filesystem_spec/commit/a1c16ab3f07f354aa371c38f7b1b07ea7fd4c5c8 (2026.6.0)
 CVE-2026-104849 (Tinypool is a minimal Node.js worker thread pool implementation. Prior ...)
 	NOT-FOR-US: Tinypool
 CVE-2026-104848 (Tinypool is a minimal Node.js worker thread pool implementation. Prior ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c3c44a2ec121420c475b7df85bc4fcf8f597ddc0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c3c44a2ec121420c475b7df85bc4fcf8f597ddc0
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261002/32ff896e/attachment-0001.htm>