[Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Tue Oct 6 08:14:02 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
11795b27 by security tracker role at 2026-10-06T07:13:54+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,4 +1,362 @@
-CVE-2026-104380
+CVE-2026-97300 (Unauthenticated Broken Access Control in WP Event Solution <= 4.1.25 v ...)
+ TODO: check
+CVE-2026-97257 (Deserialization of Untrusted Data vulnerability in PressTigers Simple ...)
+ TODO: check
+CVE-2026-95265 (Feehi CMS 2.1.1 contains a Server-Side Request Forgery (SSRF) vulnerab ...)
+ TODO: check
+CVE-2026-95264 (Feehi CMS 2.1.1 is vulnerable to Directory Traversal. An authenticated ...)
+ TODO: check
+CVE-2026-95263 (Feehi CMS 2.1.1 is vulnerable to Incorrect Access Control. A low-privi ...)
+ TODO: check
+CVE-2026-94299 (The elegro Crypto Payment WordPress plugin through 1.0.1 does not requ ...)
+ TODO: check
+CVE-2026-94293 (An unauthenticated remote attacker can modify Asset Administration She ...)
+ TODO: check
+CVE-2026-94278 (The File Media Renamer WordPress plugin through 1.3 does not verify th ...)
+ TODO: check
+CVE-2026-94271 (The Deema Payment Gateway WordPress plugin through 1.1.2 does not veri ...)
+ TODO: check
+CVE-2026-94270 (The Deema Payment Gateway WordPress plugin through 1.1.2 does not veri ...)
+ TODO: check
+CVE-2026-94201 (Ash stores :atom-typed attributes as strings and compares them as stri ...)
+ TODO: check
+CVE-2026-93617 (Deserialization of Untrusted Data vulnerability in WP Sunshine Sunshin ...)
+ TODO: check
+CVE-2026-93326 (A build step for a Git source, crafted in a specific way, can bypass s ...)
+ TODO: check
+CVE-2026-93321 (A malicious frontend can submit an LLB definition that causes buildkit ...)
+ TODO: check
+CVE-2026-93315 (When proxy networking with CA injection is enabled, a build can modify ...)
+ TODO: check
+CVE-2026-92821 (A flaw was found in SSSD. When configured to evaluate password expirat ...)
+ TODO: check
+CVE-2026-91107 (openSIS Classic 9.3 allows an authenticated user with the built-in tea ...)
+ TODO: check
+CVE-2026-89289 (The Fast Courier WordPress plugin through 5.2.3 does not restrict an ...)
+ TODO: check
+CVE-2026-86786 (The Slider Pro WordPress plugin through 1.0.0 does not perform any cap ...)
+ TODO: check
+CVE-2026-84900 (Previous versions of HP ThinPro (prior to HP ThinPro 8.1 SP10) could p ...)
+ TODO: check
+CVE-2026-82989 (There is an input injection in vCast exposed network services in ViewS ...)
+ TODO: check
+CVE-2026-82988 (There exists an arbitrary file download in vCast APK delivery mechanis ...)
+ TODO: check
+CVE-2026-78862 (An issue in Mercusys AC12 V2 allows a local attacker to execute arbitr ...)
+ TODO: check
+CVE-2026-78861 (An issue in Mercusys AC12 V2 allows a local attacker to execute arbitr ...)
+ TODO: check
+CVE-2026-78860 (An issue in Mercusys AC12 V2 allows a local attacker to execute arbitr ...)
+ TODO: check
+CVE-2026-77226 (Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vuln ...)
+ TODO: check
+CVE-2026-75962 (The Post SMTP \u2013 Complete Email Deliverability and SMTP Solution w ...)
+ TODO: check
+CVE-2026-71299 (A flaw was found in Maestro. Its REST API write endpoints were registe ...)
+ TODO: check
+CVE-2026-71298 (A flaw was found in maestro. A remote attacker could exploit a SQL inj ...)
+ TODO: check
+CVE-2026-71297 (A flaw was found in the maestro gRPC broker. This vulnerability allows ...)
+ TODO: check
+CVE-2026-59358 (Improper authentication (CWE-287) in the OAuth token endpoint in Cloud ...)
+ TODO: check
+CVE-2026-59357 (Insufficient verification of data authenticity (CWE-345) in the extern ...)
+ TODO: check
+CVE-2026-57559 (Memory corruption while processing service requests.)
+ TODO: check
+CVE-2026-57555 (Memory Corruption when executing system service routines due to improp ...)
+ TODO: check
+CVE-2026-57554 (Memory Corruption when asynchronous threads access shared performance ...)
+ TODO: check
+CVE-2026-57546 (Transient DOS when processing a continuous receive command with a zero ...)
+ TODO: check
+CVE-2026-57545 (Memory corruption when processing draw objects of incorrect type durin ...)
+ TODO: check
+CVE-2026-57537 (Memory Corruption when accessing and modifying geographic mapping data ...)
+ TODO: check
+CVE-2026-41563 (Unauthenticated Sensitive Data Exposure in Sitemovr <= 1.0.1 versions.)
+ TODO: check
+CVE-2026-41558 (Subscriber Bypass Vulnerability in WP Migration Plugin DB & Files \u20 ...)
+ TODO: check
+CVE-2026-39789 (Unauthenticated Broken Access Control in Fluent Affiliate Pro <= 1.6.4 ...)
+ TODO: check
+CVE-2026-39760 (Unauthenticated Cross Site Scripting (XSS) in Real 3D FlipBook <= 5.5 ...)
+ TODO: check
+CVE-2026-39723 (Unauthenticated Broken Access Control in Morning for WooCommerce <= 2. ...)
+ TODO: check
+CVE-2026-39599 (Contributor Broken Access Control in WDS MCP Content Manager <= 3.10.4 ...)
+ TODO: check
+CVE-2026-32582 (Contributor Broken Access Control in IATO MCP <= 1.11.0 versions.)
+ TODO: check
+CVE-2026-32576 (Customer Insecure Direct Object References (IDOR) in Faktur Pro for Wo ...)
+ TODO: check
+CVE-2026-25302 (Cryptographic Issue when processing non-ELF partitions, authentication ...)
+ TODO: check
+CVE-2026-25291 (Memory corruption when performing concurrent operations on shared memo ...)
+ TODO: check
+CVE-2026-25274 (Memory Corruption when processing concurrent DMA buffer allocation and ...)
+ TODO: check
+CVE-2026-25273 (Memory Corruption when processing camera operations due to out-of-boun ...)
+ TODO: check
+CVE-2026-25272 (Memory Corruption when processing camera CRE driver operations with im ...)
+ TODO: check
+CVE-2026-25270 (Memory corruption when processing command buffer requests with invalid ...)
+ TODO: check
+CVE-2026-25269 (Memory corruption when processing camera requests with excessive batch ...)
+ TODO: check
+CVE-2026-25267 (Memory corruption when non-secure loader rewrites page tables before s ...)
+ TODO: check
+CVE-2026-25263 (Memory corruption while processing IOCTL command called from user spac ...)
+ TODO: check
+CVE-2026-21589 (h3. Summary This is a vulnerability in Bitbucket Data Center, Conflue ...)
+ TODO: check
+CVE-2026-105786 (Joplin is an open source note-taking and to-do application that organi ...)
+ TODO: check
+CVE-2026-105785 (Joplin is an open source note-taking and to-do application that organi ...)
+ TODO: check
+CVE-2026-105784 (Joplin is an open source note-taking and to-do application that organi ...)
+ TODO: check
+CVE-2026-105783 (Joplin is an open source note-taking and to-do application that organi ...)
+ TODO: check
+CVE-2026-105782 (Scrapy is a high-level web crawling and scraping framework for Python. ...)
+ TODO: check
+CVE-2026-105778 (A vulnerability has been found in Tenda AC5 02.03.01.111_multi. Affect ...)
+ TODO: check
+CVE-2026-105776 (A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Mon ...)
+ TODO: check
+CVE-2026-105775 (A security vulnerability has been detected in vllm-project vLLM up to ...)
+ TODO: check
+CVE-2026-105773 (Canimaan Software ClamXAV versions 3.3 - 3.11 contains a local privile ...)
+ TODO: check
+CVE-2026-105768 (apko allows users to build and publish OCI container images built from ...)
+ TODO: check
+CVE-2026-105767 (Improper Neutralization of Special Elements used in an OS Command in t ...)
+ TODO: check
+CVE-2026-105766 (Use of the backend-facing $scheme variable in the trailing-slash direc ...)
+ TODO: check
+CVE-2026-105764 (Immich is a high-performance self-hosted photo and video management so ...)
+ TODO: check
+CVE-2026-105763 (Twenty is an open-source CRM (customer relationship management) platfo ...)
+ TODO: check
+CVE-2026-105762 (Dify is an open-source LLM app development platform. Prior to 1.13.0, ...)
+ TODO: check
+CVE-2026-105761 (Dify is an open-source LLM app development platform. Prior to 1.16.0, ...)
+ TODO: check
+CVE-2026-105760 (vLLM is an inference and serving engine for large language models. Pri ...)
+ TODO: check
+CVE-2026-105759 (vLLM is an inference and serving engine for large language models. Pri ...)
+ TODO: check
+CVE-2026-105758 (vLLM is an inference and serving engine for large language models. Fro ...)
+ TODO: check
+CVE-2026-105757 (vLLM is an inference and serving engine for large language models. Pri ...)
+ TODO: check
+CVE-2026-105756 (vLLM is an inference and serving engine for large language models. Pri ...)
+ TODO: check
+CVE-2026-105755 (vLLM is an inference and serving engine for large language models. Pri ...)
+ TODO: check
+CVE-2026-105754 (vLLM is an inference and serving engine for large language models. Pri ...)
+ TODO: check
+CVE-2026-105753 (vLLM is an inference and serving engine for large language models. Pri ...)
+ TODO: check
+CVE-2026-105752 (vLLM is an inference and serving engine for large language models. Pri ...)
+ TODO: check
+CVE-2026-105751 (Docling simplifies document processing by parsing diverse formats and ...)
+ TODO: check
+CVE-2026-105750 (Docling simplifies document processing by parsing diverse formats and ...)
+ TODO: check
+CVE-2026-105749 (Docling simplifies document processing by parsing diverse formats and ...)
+ TODO: check
+CVE-2026-105748 (Docling simplifies document processing by parsing diverse formats and ...)
+ TODO: check
+CVE-2026-105747 (Docling simplifies document processing by parsing diverse formats and ...)
+ TODO: check
+CVE-2026-105746 (Docling simplifies document processing by parsing diverse formats and ...)
+ TODO: check
+CVE-2026-105745 (Docling simplifies document processing by parsing diverse formats and ...)
+ TODO: check
+CVE-2026-105744 (Docling simplifies document processing by parsing diverse formats and ...)
+ TODO: check
+CVE-2026-105743 (Docling simplifies document processing by parsing diverse formats and ...)
+ TODO: check
+CVE-2026-105742 (Docling simplifies document processing by parsing diverse formats and ...)
+ TODO: check
+CVE-2026-105741 (Langflow is a tool for building and deploying AI-powered agents and wo ...)
+ TODO: check
+CVE-2026-105740 (Langflow is a tool for building and deploying AI-powered agents and wo ...)
+ TODO: check
+CVE-2026-105708 (A flaw has been found in imgproxy up to 4.0.17. Affected by this vulne ...)
+ TODO: check
+CVE-2026-105707 (A security vulnerability has been detected in uptrace up to 2.1.0-beta ...)
+ TODO: check
+CVE-2026-105706 (A weakness has been identified in SourceCodester Drug Recommendation S ...)
+ TODO: check
+CVE-2026-105705 (A security flaw has been discovered in SourceCodester Drug Recommendat ...)
+ TODO: check
+CVE-2026-105704 (A vulnerability was identified in SourceCodester Drug Recommendation S ...)
+ TODO: check
+CVE-2026-105703 (A vulnerability was determined in PHPGurukul User Registration & Login ...)
+ TODO: check
+CVE-2026-105701 (The ACPT (Premium) plugin for WordPress is vulnerable to Remote Code E ...)
+ TODO: check
+CVE-2026-105699 (Langflow is a tool for building and deploying AI-powered agents and wo ...)
+ TODO: check
+CVE-2026-105698 (Langflow is a tool for building and deploying AI-powered agents and wo ...)
+ TODO: check
+CVE-2026-105697 (Langflow is a tool for building and deploying AI-powered agents and wo ...)
+ TODO: check
+CVE-2026-105696 (Penpot is an open-source design and prototyping platform. Prior to 2.1 ...)
+ TODO: check
+CVE-2026-105695 (Penpot is an open-source design and prototyping platform. Prior to 2.1 ...)
+ TODO: check
+CVE-2026-105694 (Penpot is an open-source design and prototyping platform. Prior to 2.1 ...)
+ TODO: check
+CVE-2026-105693 (Penpot is an open-source design and prototyping platform. Prior to 2.1 ...)
+ TODO: check
+CVE-2026-105692 (Penpot is an open-source design and prototyping platform. Prior to 2.1 ...)
+ TODO: check
+CVE-2026-105691 (Penpot is an open-source design and prototyping platform. Prior to 2.1 ...)
+ TODO: check
+CVE-2026-105690 (Penpot is an open-source design and prototyping platform. Prior to 2.1 ...)
+ TODO: check
+CVE-2026-105689 (Penpot is an open-source design and prototyping platform. Prior to 2.1 ...)
+ TODO: check
+CVE-2026-105688 (Penpot is an open-source design and prototyping platform. Prior to 2.1 ...)
+ TODO: check
+CVE-2026-105687 (Penpot is an open-source design and prototyping platform. Prior to 2.1 ...)
+ TODO: check
+CVE-2026-105686 (Penpot is an open-source design and prototyping platform. Prior to 2.1 ...)
+ TODO: check
+CVE-2026-105684 (Penpot is an open-source design and prototyping platform. Prior to 2.1 ...)
+ TODO: check
+CVE-2026-105683 (Ghost is a Node.js content management system. From 6.14.0 until 6.27.0 ...)
+ TODO: check
+CVE-2026-105682 (Ghost is a Node.js content management system. From 1.18.0 until 6.27.0 ...)
+ TODO: check
+CVE-2026-105681 (Ghost is a Node.js content management system. From 5.9.0 until 6.44.1, ...)
+ TODO: check
+CVE-2026-105680 (Ghost is a Node.js content management system. From 5.81.0 until 6.60.0 ...)
+ TODO: check
+CVE-2026-105679 (Ghost is a Node.js content management system. From 6.22.1 until 6.64.0 ...)
+ TODO: check
+CVE-2026-105678 (Ghost is a Node.js content management system. From 0.5.0 until 6.64.0, ...)
+ TODO: check
+CVE-2026-105677 (Ghost is a Node.js content management system. From 6.10.3 until 6.64.0 ...)
+ TODO: check
+CVE-2026-105676 (Ghost is a Node.js content management system. From 1.20.0 until 6.64.0 ...)
+ TODO: check
+CVE-2026-105675 (Ghost is a Node.js content management system. From 4.39.0 until 6.64.0 ...)
+ TODO: check
+CVE-2026-105652 (Ghost is a Node.js content management system. From 0.7.2 until 6.64.0, ...)
+ TODO: check
+CVE-2026-105651 (Ghost is a Node.js content management system. From 5.94.0 until 6.64.0 ...)
+ TODO: check
+CVE-2026-105650 (Ghost is a Node.js content management system. From 2.1.0 until 6.64.0, ...)
+ TODO: check
+CVE-2026-105649 (Ghost is a Node.js content management system. From 4.22.0 until 6.65.0 ...)
+ TODO: check
+CVE-2026-105648 (Ghost is a Node.js content management system. From 6.0.9 until 6.65.0, ...)
+ TODO: check
+CVE-2026-105647 (Ghost is a Node.js content management system. From 6.54.1 until 6.65.0 ...)
+ TODO: check
+CVE-2026-105621 (A security flaw has been discovered in jishenghua jshERP up to 3.5. Af ...)
+ TODO: check
+CVE-2026-105611 (A vulnerability was determined in chillzhuang SpringBlade up to 5.0.1. ...)
+ TODO: check
+CVE-2026-105610 (A vulnerability was found in chillzhuang SpringBlade up to 5.0.1. The ...)
+ TODO: check
+CVE-2026-105573 (A vulnerability was found in newbee-ltd newbee-mall up to 2.7.5. This ...)
+ TODO: check
+CVE-2026-105572 (A vulnerability has been found in PickMall Lilishop up to 4.2.4. This ...)
+ TODO: check
+CVE-2026-105571 (A flaw has been found in PickMall Lilishop up to 4.2.4. The impacted e ...)
+ TODO: check
+CVE-2026-105487 (A vulnerability was found in yogeshojha reNgine up to 2.2.0. Affected ...)
+ TODO: check
+CVE-2026-105486 (A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects t ...)
+ TODO: check
+CVE-2026-105484 (A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu. ...)
+ TODO: check
+CVE-2026-105472 (A weakness has been identified in girishsaraf Online-Appointment-Booki ...)
+ TODO: check
+CVE-2026-105471 (A security flaw has been discovered in girishsaraf Online-Appointment- ...)
+ TODO: check
+CVE-2026-105470 (A vulnerability was identified in girishsaraf Online-Appointment-Booki ...)
+ TODO: check
+CVE-2026-105469 (A vulnerability was determined in girishsaraf Online-Appointment-Booki ...)
+ TODO: check
+CVE-2026-105468 (A vulnerability was found in girishsaraf Online-Appointment-Booking-Sy ...)
+ TODO: check
+CVE-2026-105447 (A flaw was found in Quay. When handling build trigger requests, the ap ...)
+ TODO: check
+CVE-2026-105444 (A security flaw has been discovered in dotnet eShop .NET 8. The impact ...)
+ TODO: check
+CVE-2026-105438 (A flaw has been found in O2OA up to 10.0.1-ce. This affects the functi ...)
+ TODO: check
+CVE-2026-105392 (A vulnerability has been found in Lybbn Django-Vue-Lyadmin up to 3.2.1 ...)
+ TODO: check
+CVE-2026-105389 (A security vulnerability has been detected in feelec-yishu feelcrm-os ...)
+ TODO: check
+CVE-2026-105388 (A weakness has been identified in feelec-yishu feelcrm-os 1.0.0. This ...)
+ TODO: check
+CVE-2026-105072 (Unauthenticated Broken Access Control in FluentBooking Pro < 2.5.0 ver ...)
+ TODO: check
+CVE-2026-104852 (GraphQL Tools provides utilities for building, stitching, and mocking ...)
+ TODO: check
+CVE-2026-104044 (A flaw was found in sssd. A local attacker can trigger a Denial of Ser ...)
+ TODO: check
+CVE-2026-104043 (A flaw was found in SSSD. A local attacker with access to the Name Ser ...)
+ TODO: check
+CVE-2026-104042 (A flaw was found in sssd. A local attacker can cause a Denial of Servi ...)
+ TODO: check
+CVE-2026-104041 (A flaw was found in SSSD. An unprivileged local user can repeatedly re ...)
+ TODO: check
+CVE-2026-104040 (A flaw was found in SSSD. When configured with the Entra ID identity p ...)
+ TODO: check
+CVE-2026-104039 (A flaw was found in SSSD. A local user can cause a denial of service ( ...)
+ TODO: check
+CVE-2026-104038 (A flaw was found in sssd. A remote attacker can cause a denial of serv ...)
+ TODO: check
+CVE-2026-104037 (A flaw was found in SSSD. A local attacker can exploit this issue by s ...)
+ TODO: check
+CVE-2026-104036 (A flaw was found in SSSD's NFS idmap plugin. When retrieving cached us ...)
+ TODO: check
+CVE-2026-104035 (A flaw was found in SSSD. An issue in the Kerberos Credential Manager ...)
+ TODO: check
+CVE-2026-104034 (A flaw was found in SSSD. A use-after-free vulnerability exists in the ...)
+ TODO: check
+CVE-2026-104033 (A flaw was found in SSSD. When configured to enforce account expiratio ...)
+ TODO: check
+CVE-2026-104032 (A flaw was found in SSSD. An unprivileged local user can repeatedly re ...)
+ TODO: check
+CVE-2026-104031 (A flaw was found in SSSD. In configurations where the autofs responder ...)
+ TODO: check
+CVE-2026-104030 (A flaw was found in sssd. This vulnerability allows a local user to ca ...)
+ TODO: check
+CVE-2026-104029 (A flaw was found in SSSD. A local attacker can exploit this vulnerabil ...)
+ TODO: check
+CVE-2026-103546 (In MongoDB Controllers for Kubernetes, insufficient validation of Ops ...)
+ TODO: check
+CVE-2026-103433 (Docker Buildx Bake does not request the expected fs.read approval for ...)
+ TODO: check
+CVE-2026-103348 (Deserialization of Untrusted Data vulnerability in Smackcoders Inc. WP ...)
+ TODO: check
+CVE-2026-103337 (Missing Authorization vulnerability in Kirillbdev WC Ukraine Shipping ...)
+ TODO: check
+CVE-2026-103066 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+ TODO: check
+CVE-2026-102262 (Newell Brands DYMO ID 1.5.1.71 resolves its plugin Modules directory r ...)
+ TODO: check
+CVE-2026-101893 (Newell Brands DYMO ID 1.5.1.71 parses job files using XmlDocument.Load ...)
+ TODO: check
+CVE-2026-100511 (Deserialization of Untrusted Data vulnerability in Vektor Inc. VK Goog ...)
+ TODO: check
+CVE-2026-100506 (Deserialization of Untrusted Data vulnerability in WP Spell Check WP S ...)
+ TODO: check
+CVE-2026-0482 (In AMD Versal\u2122 Adaptive SoC devices, insufficient boundary checks ...)
+ TODO: check
+CVE-2026-0461 (Insufficient boundary validation in the USB boot mode implementation o ...)
+ TODO: check
+CVE-2026-104380 (Punk versions from 0.48 before 0.55 for Perl route Extended CONNECT re ...)
NOT-FOR-US: Punk Perl module
CVE-2026-55480
- cups <unfixed>
@@ -96,7 +454,7 @@ CVE-2026-93316 (If BuildKit daemon is started with --cdi-disabled it can lead to
TODO: check security impact on docker.io
CVE-2026-92931 (CWE-918: Server-Side Request Forgery in the Progress @progress/sitefin ...)
NOT-FOR-US: Progress Software
-CVE-2026-89039 (The convert_playwright_script prompt in the k6 MCP server accepts a fi ...)
+CVE-2026-89039 (A caller who can invoke the convert_playwright_script prompt in mcp-k6 ...)
NOT-FOR-US: Grafana
CVE-2026-88424 (FineAdmin v1.0 was discovered to contain a SQL injection vulnerability ...)
NOT-FOR-US: FineAdmin
@@ -7714,7 +8072,7 @@ CVE-2026-17588 [hw/usb/hcd-xhci: Set reentrancy guard in timer functions]
NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/ed582623e2372fdf862a804d122766052aba81c7 (v11.1.2)
NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/1622c9abec17d5cba63383d4d4cb1419cedf8158 (v10.0.14)
CVE-2026-46675 [Use-after-free of zlib input in `png_read_end` after incomplete zTXt, iTXt or iCCP decompression]
- {DSA-6537-1}
+ {DSA-6537-1 DLA-4824-1}
- libpng1.6 1.6.59-1
NOTE: https://github.com/pnggroup/libpng/security/advisories/GHSA-qvg3-h654-xq3j
NOTE: https://github.com/pnggroup/libpng/issues/855
@@ -155901,7 +156259,7 @@ CVE-2026-7702 (A vulnerability was detected in toeverything AFFiNE up to 0.26.3.
CVE-2026-7701 (A security vulnerability has been detected in Telegram Desktop up to 6 ...)
- telegram-desktop <undetermined>
TODO: check upstream reports
-CVE-2026-7700 (A weakness has been identified in langflow-ai langflow up to 1.8.4. Th ...)
+CVE-2026-7700 (A weakness has been identified in langflow-ai langflow up to 1.10.2. T ...)
NOT-FOR-US: langflow-ai langflow
CVE-2026-7699 (A security flaw has been discovered in Dromara MaxKey up to 3.5.13. Af ...)
NOT-FOR-US: Dromara MaxKey
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/11795b2716d748ab455f03425d1c471b40c44986
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/11795b2716d748ab455f03425d1c471b40c44986
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261006/13c4fe43/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list