[Git][security-tracker-team/security-tracker][master] Adjust references for modsecurity GHSA's

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
891c2012 by Salvatore Bonaccorso at 2026-10-05T21:01:32+02:00
Adjust references for modsecurity GHSA's

In the initial blogpost they were referenced as such but lead to 404.
Reference instread the correct link to the GHSAs which in meanwhile are
updated as well on the blogpost.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2770,34 +2770,34 @@ CVE-2023-54402 (iDocView contains a server-side request forgery vulnerability in
 CVE-2026-104269 [GHSA-5pww-8rfg-9crf: RFC 2231 filename* parameter bypasses multipart filename rules]
 	- modsecurity <unfixed> (bug #1149651)
 	- modsecurity-apache <unfixed> (bug #1149714)
-	NOTE: https://github.com/advisories/GHSA-5pww-8rfg-9crf
+	NOTE: https://github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-5pww-8rfg-9crf
 	NOTE: https://modsecurity.org/20260928/security-update-digest-overview-of-recent-advisory-fixes-2026-september/
 CVE-2026-XXXX [GHSA-4j47-8qcr-jf59: t:base64DecodeExt does not decode - and _, bypassing rules on URL-safe encoded payloads]
 	- modsecurity <unfixed> (bug #1149651)
 	- modsecurity-apache <unfixed> (bug #1149714)
-	NOTE: https://github.com/advisories/GHSA-4j47-8qcr-jf59
+	NOTE: https://github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-4j47-8qcr-jf59
 	NOTE: https://modsecurity.org/20260928/security-update-digest-overview-of-recent-advisory-fixes-2026-september/
 CVE-2026-104259 [GHSA-qrch-pjfr-9g47: t:removeComments mishandles the character after a comment terminator, bypassing rules]
 	- modsecurity <unfixed> (bug #1149651)
 	- modsecurity-apache <unfixed> (bug #1149714)
-	NOTE: https://github.com/advisories/GHSA-qrch-pjfr-9g47
+	NOTE: https://github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-qrch-pjfr-9g47
 	NOTE: https://modsecurity.org/20260928/security-update-digest-overview-of-recent-advisory-fixes-2026-september/
 CVE-2026-103932 [GHSA-5m93-4h75-3p2w: @rxGlobal PCRE2 error handling: match-limit fail-open and invalid-pattern crash]
 	- modsecurity <unfixed> (bug #1149651)
-	NOTE: https://github.com/advisories/GHSA-5m93-4h75-3p2w
+	NOTE: https://github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-5m93-4h75-3p2w
 	NOTE: https://modsecurity.org/20260928/security-update-digest-overview-of-recent-advisory-fixes-2026-september/
 CVE-2026-73856 [GHSA-vmg8-j66p-vgvw: Response body inspection bypass via non-canonical Content-Type casing]
 	- modsecurity <unfixed> (bug #1149651)
-	NOTE: https://github.com/advisories/GHSA-vmg8-j66p-vgvw
+	NOTE: https://github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-vmg8-j66p-vgvw
 	NOTE: https://modsecurity.org/20260928/security-update-digest-overview-of-recent-advisory-fixes-2026-september/
 CVE-2026-73857 [GHSA-jx3r-phvx-2jmj: XML request body processor dereferences an uninitialized parser context pointer]
 	- modsecurity <unfixed> (bug #1149651)
-	NOTE: https://github.com/advisories/GHSA-jx3r-phvx-2jmj
+	NOTE: https://github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-jx3r-phvx-2jmj
 	NOTE: https://modsecurity.org/20260928/security-update-digest-overview-of-recent-advisory-fixes-2026-september/
 CVE-2026-61813 [GHSA-2vqc-36qp-ccmw: Weak libcurl TLS hostname verification setting when fetching over HTTPS]
 	- modsecurity <unfixed> (bug #1149651)
 	- modsecurity-apache <unfixed> (bug #1149714)
-	NOTE: https://github.com/advisories/GHSA-2vqc-36qp-ccmw
+	NOTE: https://github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-2vqc-36qp-ccmw
 	NOTE: https://modsecurity.org/20260928/security-update-digest-overview-of-recent-advisory-fixes-2026-september/
 CVE-2026-61812 [GHSA-cxqf-vgrr-xxrv: HTML decoder missing entities, leading to evasion]
 	- modsecurity <unfixed> (bug #1149651)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/891c2012b51545ae19add9e9af19b632d4625b26

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/891c2012b51545ae19add9e9af19b632d4625b26
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261005/08237298/attachment-0001.htm>