[Git][security-tracker-team/security-tracker][master] Update status for some miniflux issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
dac74f2e by Salvatore Bonaccorso at 2026-10-12T20:17:42+02:00
Update status for some miniflux issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -315649,7 +315649,9 @@ CVE-2025-31486 (Vite is a frontend tooling framework for javascript. The content
 CVE-2025-31485 (API Platform Core is a system to create hypermedia-driven REST and Gra ...)
 	NOT-FOR-US: API Platform Core
 CVE-2025-31483 (Miniflux is a feed reader. Due to a weak Content Security Policy on th ...)
-	NOT-FOR-US: Miniflux
+	- miniflux 2.2.12-1
+	NOTE: https://github.com/miniflux/v2/security/advisories/GHSA-cq88-842x-2jhp
+	NOTE: Fixed by: https://github.com/miniflux/v2/commit/cb695e653a08af4cabcb277c271ce74bd0c746e6 (2.2.7)
 CVE-2025-31481 (API Platform Core is a system to create hypermedia-driven REST and Gra ...)
 	NOT-FOR-US: API Platform Core
 CVE-2025-31468 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
@@ -496373,9 +496375,15 @@ CVE-2023-27594 (Cilium is a networking, observability, and security solution wit
 CVE-2023-27593 (Cilium is a networking, observability, and security solution with an e ...)
 	- cilium <itp> (bug #858303)
 CVE-2023-27592 (Miniflux is a feed reader. Since v2.0.25, Miniflux will automatically  ...)
-	NOT-FOR-US: Miniflux
+	- miniflux <not-affected> (Fixed before initial upload to Debian)
+	NOTE: https://github.com/miniflux/v2/security/advisories/GHSA-mqqg-xjhj-wfgw
+	NOTE: https://github.com/miniflux/v2/pull/1746
+	NOTE: Fixed by: https://github.com/miniflux/v2/commit/eb9508502c97c1341b8120916e34b260824cc52d (2.0.43)
 CVE-2023-27591 (Miniflux is a feed reader. Prior to version 2.0.43, an unauthenticated ...)
-	NOT-FOR-US: Miniflux
+	- miniflux <not-affected> (Fixed before initial upload to Debian)
+	NOTE: https://github.com/miniflux/v2/security/advisories/GHSA-3qjf-qh38-x73v
+	NOTE: https://github.com/miniflux/v2/pull/1745
+	NOTE: Fixed by: https://github.com/miniflux/v2/commit/b46b5dfb2aa3a1f5320a7a3420b9186bb8fc655f (2.0.43)
 CVE-2023-27590 (Rizin is a UNIX-like reverse engineering framework and command-line to ...)
 	NOT-FOR-US: Rizin
 CVE-2023-27589 (Minio is a Multi-Cloud Object Storage framework. Starting with RELEASE ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dac74f2e58b9d5945199fa97b47234500c9bac3a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dac74f2e58b9d5945199fa97b47234500c9bac3a
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261012/f690fc00/attachment.htm>