[Git][security-tracker-team/security-tracker][master] Add new ghost issues, itp'ed

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Oct 6 08:23:30 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2c0d26c2 by Salvatore Bonaccorso at 2026-10-06T09:23:05+02:00
Add new ghost issues, itp'ed

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -229,35 +229,35 @@ CVE-2026-105686 (Penpot is an open-source design and prototyping platform. Prior
 CVE-2026-105684 (Penpot is an open-source design and prototyping platform. Prior to 2.1 ...)
 	TODO: check
 CVE-2026-105683 (Ghost is a Node.js content management system. From 6.14.0 until 6.27.0 ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-105682 (Ghost is a Node.js content management system. From 1.18.0 until 6.27.0 ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-105681 (Ghost is a Node.js content management system. From 5.9.0 until 6.44.1, ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-105680 (Ghost is a Node.js content management system. From 5.81.0 until 6.60.0 ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-105679 (Ghost is a Node.js content management system. From 6.22.1 until 6.64.0 ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-105678 (Ghost is a Node.js content management system. From 0.5.0 until 6.64.0, ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-105677 (Ghost is a Node.js content management system. From 6.10.3 until 6.64.0 ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-105676 (Ghost is a Node.js content management system. From 1.20.0 until 6.64.0 ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-105675 (Ghost is a Node.js content management system. From 4.39.0 until 6.64.0 ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-105652 (Ghost is a Node.js content management system. From 0.7.2 until 6.64.0, ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-105651 (Ghost is a Node.js content management system. From 5.94.0 until 6.64.0 ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-105650 (Ghost is a Node.js content management system. From 2.1.0 until 6.64.0, ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-105649 (Ghost is a Node.js content management system. From 4.22.0 until 6.65.0 ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-105648 (Ghost is a Node.js content management system. From 6.0.9 until 6.65.0, ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-105647 (Ghost is a Node.js content management system. From 6.54.1 until 6.65.0 ...)
-	TODO: check
+	- ghost <itp> (bug #892150)
 CVE-2026-105621 (A security flaw has been discovered in jishenghua jshERP up to 3.5. Af ...)
 	TODO: check
 CVE-2026-105611 (A vulnerability was determined in chillzhuang SpringBlade up to 5.0.1. ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2c0d26c23f296a478a0522d0163134347d676d6c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2c0d26c23f296a478a0522d0163134347d676d6c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261006/fc459f14/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list