[Git][security-tracker-team/security-tracker][master] Add two mongodb issues
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Tue Oct 13 20:50:49 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
becb438d by Salvatore Bonaccorso at 2026-10-13T21:50:25+02:00
Add two mongodb issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -12,9 +12,11 @@ CVE-2026-97333 (QAPI contained a stack-based buffer overflow affecting service a
CVE-2026-96535 (Cross-Site Scripting on the YouMind portal, specifically in the avatar ...)
NOT-FOR-US: YouMind portal
CVE-2026-96299 (A security issue was discovered in MongoDB mongos (the sharded cluster ...)
- TODO: check
+ - mongodb <removed>
+ NOTE: https://jira.mongodb.org/browse/SERVER-130431
CVE-2026-96297 (Use of freed memory in the aggregation feature of MongoDB Server can c ...)
- TODO: check
+ - mongodb <removed>
+ NOTE: https://jira.mongodb.org/browse/SERVER-132946
CVE-2026-95680 (IBM WebSphere Application Server 8.5, and 9.0 could allow an authentic ...)
NOT-FOR-US: IBM
CVE-2026-95631 (Adobe Commerce is affected by an Improper Input Validation vulnerabili ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/becb438d4eadda21bcae9864bd5738b85d03462b
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/becb438d4eadda21bcae9864bd5738b85d03462b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261013/cff9a3cd/attachment.htm>
More information about the debian-security-tracker-commits
mailing list