[Git][security-tracker-team/security-tracker][master] Add two mongodb issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Oct 13 20:50:49 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
becb438d by Salvatore Bonaccorso at 2026-10-13T21:50:25+02:00
Add two mongodb issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -12,9 +12,11 @@ CVE-2026-97333 (QAPI contained a stack-based buffer overflow affecting service a
 CVE-2026-96535 (Cross-Site Scripting on the YouMind portal, specifically in the avatar ...)
 	NOT-FOR-US: YouMind portal
 CVE-2026-96299 (A security issue was discovered in MongoDB mongos (the sharded cluster ...)
-	TODO: check
+	- mongodb <removed>
+	NOTE: https://jira.mongodb.org/browse/SERVER-130431
 CVE-2026-96297 (Use of freed memory in the aggregation feature of MongoDB Server can c ...)
-	TODO: check
+	- mongodb <removed>
+	NOTE: https://jira.mongodb.org/browse/SERVER-132946
 CVE-2026-95680 (IBM WebSphere Application Server 8.5, and 9.0 could allow an authentic ...)
 	NOT-FOR-US: IBM
 CVE-2026-95631 (Adobe Commerce is affected by an Improper Input Validation vulnerabili ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/becb438d4eadda21bcae9864bd5738b85d03462b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/becb438d4eadda21bcae9864bd5738b85d03462b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261013/cff9a3cd/attachment.htm>


More information about the debian-security-tracker-commits mailing list