[Git][security-tracker-team/security-tracker][master] Add reference to introducing commit for CVE-2026-94488

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Oct 9 06:15:15 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e05d4d6e by Salvatore Bonaccorso at 2026-10-09T07:14:49+02:00
Add reference to introducing commit for CVE-2026-94488

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -20919,7 +20919,8 @@ CVE-2026-94489 (A vulnerability was identified in OctoPrint 1.0.0. Affected by t
 CVE-2026-94488 (Telegram Desktop before 6.9.4 allows XSS in the HTML exporter. (The fi ...)
 	- telegram-desktop <unfixed> (bug #1150329)
 	NOTE: https://expatch.com/writeups/telegram-html-export-xss.html
-	NOTE: https://github.com/telegramdesktop/tdesktop/commit/8457d13aa795fadf99c955d2a04f00ebc3c59df9 (v6.9.4)
+	NOTE: Introduced with: https://github.com/telegramdesktop/tdesktop/commit/52c779bffa8dde3c5c09826add2607328fae0924 (v4.15.1)
+	NOTE: Fixed by: https://github.com/telegramdesktop/tdesktop/commit/8457d13aa795fadf99c955d2a04f00ebc3c59df9 (v6.9.4)
 CVE-2026-94426 (A vulnerability was determined in xuxueli xxl-job up to 3.5.0. The imp ...)
 	NOT-FOR-US: xuxueli xxl-job
 CVE-2026-94425 (A vulnerability was found in Moore Threads MTT S80 Driver Package 340. ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e05d4d6ebdf85579626e8084062409ee683fdff0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e05d4d6ebdf85579626e8084062409ee683fdff0
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261009/7ac9c8aa/attachment.htm>


More information about the debian-security-tracker-commits mailing list