[Git][security-tracker-team/security-tracker][master] Adjust source association of CVE-2026-79310

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sun Oct 4 06:17:02 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4ef8e126 by Salvatore Bonaccorso at 2026-10-04T07:14:38+02:00
Adjust source association of CVE-2026-79310

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -13371,8 +13371,8 @@ CVE-2026-79616 (Out-of-bounds read while parsing untrusted SVG path strings in Q
 	NOTE: https://codereview.qt-project.org/c/qt/qtdeclarative/+/754718
 	NOTE: https://github.com/qt/qtdeclarative/commit/34a90737c73d5fb9043367fdf944a553f82f9053 (v6.11.2)
 CVE-2026-79310 (webpy web.py 0.76 is vulnerable to server-side template injection (SST ...)
-	- web2py <unfixed>
-	[trixie] - web2py <no-dsa> (Minor issue)
+	- webpy <unfixed>
+	[trixie] - webpy <no-dsa> (Minor issue)
 	NOTE: https://github.com/lichoin/TraceLoom/blob/main/CVEs/CVE-2026-79310.md
 CVE-2026-79306 (CyberPanel v1.9.1 contains a path traversal vulnerability in the compr ...)
 	NOT-FOR-US: CyberPanel



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4ef8e1262b84af258dd799b7a33f3f5e134bba6e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4ef8e1262b84af258dd799b7a33f3f5e134bba6e
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261004/978aa1ab/attachment.htm>


More information about the debian-security-tracker-commits mailing list