[Git][security-tracker-team/security-tracker][master] Add CVE-2026-106454/twisted

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0d2f0494 by Salvatore Bonaccorso at 2026-10-07T10:50:17+02:00
Add CVE-2026-106454/twisted

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -315,7 +315,10 @@ CVE-2026-106456 (Backstage is an open framework for building developer portals.
 CVE-2026-106455 (Backstage is an open framework for building developer portals. From 0. ...)
 	NOT-FOR-US: Backstage
 CVE-2026-106454 (Twisted is an event-based framework for internet applications, support ...)
-	TODO: check
+	- twisted <unfixed>
+	NOTE: https://github.com/twisted/twisted/security/advisories/GHSA-8pqf-f4m5-798g
+	NOTE: https://github.com/twisted/twisted/pull/12788
+	NOTE: Fixed by: https://github.com/twisted/twisted/commit/2f8a3c29246f4eb324690e06a9767a11dc4aec9f
 CVE-2026-106453 (yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, LZ ...)
 	- lz4-java 1.11.2+ds1-1
 	NOTE: https://github.com/yawkat/lz4-java/security/advisories/GHSA-6cx8-rjf8-pr8g



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0d2f04948a57f5178ebb97b03278944aa406d074

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0d2f04948a57f5178ebb97b03278944aa406d074
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261007/0beddab5/attachment.htm>