[Git][security-tracker-team/security-tracker][master] new openrefine issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0ac30db2 by Moritz Muehlenhoff at 2026-10-10T21:33:06+02:00
new openrefine issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -119,7 +119,8 @@ CVE-2026-108555 (PairDrop through 1.11.2 contains an IP spoofing vulnerability i
 CVE-2026-108554 (PDFMathTranslate (pdf2zh) through 1.9.11 contains a server-side reques ...)
 	NOT-FOR-US: PDFMathTranslate
 CVE-2026-108553 (OpenRefine through 3.10.1 contains a cross-site request forgery vulner ...)
-	TODO: check
+	- openrefine <unfixed>
+	NOTE: https://github.com/OpenRefine/OpenRefine/issues/7999
 CVE-2026-108551 (openapi-typescript-codegen through 0.31.0 contains a code injection vu ...)
 	NOT-FOR-US: openapi-typescript-codegen
 CVE-2026-108550 (SkillHub before 0.2.22 contains an incorrect authorization vulnerabili ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0ac30db2db3a4b2bbc6716e227b1cd968b116cc2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0ac30db2db3a4b2bbc6716e227b1cd968b116cc2
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261010/e1ec9077/attachment.htm>