[Git][security-tracker-team/security-tracker][master] bugnums

Fri Oct 16 22:16:06 BST 2026


Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b3a12f6f by Moritz Muehlenhoff at 2026-10-16T23:15:36+02:00
bugnums

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -59,7 +59,7 @@ CVE-2026-81452 (Dell Alienware Command Center (AWCC), versions prior to 6.14.54.
 CVE-2026-80092 (Authentication bypass by assumed-immutable data in Microsoft Identity  ...)
 	NOT-FOR-US: Microsoft
 CVE-2026-77630 (pupnp is an SDK for development of UPnP device and control point appli ...)
-	- pupnp <unfixed>
+	- pupnp <unfixed> (bug #1151082)
 	NOTE: https://github.com/pupnp/pupnp/security/advisories/GHSA-46ph-jff5-5h77
 	NOTE: https://github.com/pupnp/pupnp/commit/5dba8070b4d64d976f8e6fc13f1f301befebe7d2 (release-22.0.4)
 CVE-2026-77474 (destructive_command_guard (dcg) is a command-line safety tool that blo ...)
@@ -89,15 +89,15 @@ CVE-2026-59967 (Tandoor Recipes is an application for managing recipes, planning
 CVE-2026-59962 (Tandoor Recipes is an application for managing recipes, planning meals ...)
 	NOT-FOR-US: Tandoor Recipes
 CVE-2026-57488 (pupnp is an SDK for development of UPnP device and control point appli ...)
-	- pupnp <unfixed>
+	- pupnp <unfixed> (bug #1151082)
 	NOTE: https://github.com/pupnp/pupnp/security/advisories/GHSA-g6c2-x4r9-352g
 	NOTE: https://github.com/pupnp/pupnp/commit/de9602aef34ff722f3630d66c9be8eaa0aa9f012 (release-2.0.2)
 CVE-2026-57487 (pupnp is an SDK for development of UPnP device and control point appli ...)
-	- pupnp <unfixed>
+	- pupnp <unfixed> (bug #1151082)
 	NOTE: https://github.com/pupnp/pupnp/security/advisories/GHSA-gcj7-j9f7-q84c
 	NOTE: https://github.com/pupnp/pupnp/commit/9ff9bc583ad8ee4ba022634434a7b71db9bd96e1 (release-2.0.2)
 CVE-2026-57486 (pupnp is an SDK for development of UPnP device and control point appli ...)
-	- pupnp <unfixed>
+	- pupnp <unfixed> (bug #1151082)
 	NOTE: https://github.com/pupnp/pupnp/security/advisories/GHSA-q54q-vx78-v9rq
 	NOTE: https://github.com/pupnp/pupnp/commit/4b2f775e3b98de3cfb096707bcde040c5562d9ec (release-2.0.2)
 CVE-2026-57447 (Discourse Doc Categories is a plugin for organizing Discourse topics a ...)
@@ -107,7 +107,7 @@ CVE-2026-57446 (libIEC61850 is an open-source implementation of IEC 61850 client
 CVE-2026-57169 (Dockhand is a Docker management application. Prior to 1.0.34, the in-b ...)
 	TODO: check
 CVE-2026-55862 (pupnp is an SDK for development of UPnP device and control point appli ...)
-	- pupnp <unfixed>
+	- pupnp <unfixed> (bug #1151082)
 	NOTE: https://github.com/pupnp/pupnp/security/advisories/GHSA-25cx-xv8x-j247
 	NOTE: https://github.com/pupnp/pupnp/commit/82ccaec7ab6b1258ea1ac66374d8940712ccd4c4 (release-2.0.0)
 CVE-2026-55836 (Open Zaak is an open-source data and services layer for Dutch case-ori ...)
@@ -1119,7 +1119,7 @@ CVE-2026-8145 (The WholesaleX \u2013 B2B & Wholesale Plugin for WooCommerce with
 CVE-2026-88794 (Enterprise Architect is vulnerable to XML External Entity (XXE) inject ...)
 	NOT-FOR-US: Enterprise Architect
 CVE-2026-88753 (A Regular-Expression Denial of Service (ReDoS) in the Markdown2. extra ...)
-	- python-markdown2 <unfixed>
+	- python-markdown2 <unfixed> (bug #1151085)
 	NOTE: https://gist.github.com/NanaSec/354b4188bbd7f4105008c7b8be49b0ba
 CVE-2026-87029 (undici is an HTTP client library for Node.js. In versions 7.15.0 throu ...)
 	- node-undici 8.12.2+dfsg+~cs3.2.3-1
@@ -2117,7 +2117,7 @@ CVE-2026-110841 (n8n before 2.41.4 and 2.42.0 contains an authorization bypass i
 CVE-2026-110840 (n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection v ...)
 	NOT-FOR-US: n8n
 CVE-2026-110816 (### Summary    `qs.stringify` with `arrayFormat: 'comma'` throws `Type ...)
-	- node-qs <unfixed>
+	- node-qs <unfixed> (bug #1151084)
 	NOTE: https://github.com/ljharb/qs/security/advisories/GHSA-6pq8-jhm2-2vcw
 	NOTE: https://github.com/ljharb/qs/commit/a952e7519338ef0cfb25694a2988848f93333727 (v6.16.1)
 CVE-2026-110810 (A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This ...)
@@ -2827,7 +2827,7 @@ CVE-2026-110604 (Mini-XML 4.0.0 through 4.0.6 contains an off-by-one stack out-o
 CVE-2026-110603 (LASzip through 3.5.0 contains an invalid free vulnerability in laszip_ ...)
 	TODO: check
 CVE-2026-110602 (libmspack through 0.11alpha contains an uninitialized pointer free vul ...)
-	- libmspack <unfixed>
+	- libmspack <unfixed> (bug #1151083)
 	NOTE: https://github.com/kyz/libmspack/commit/4d868504114346aa767d435fbb89a8b76603493f
 CVE-2026-110601 (libsixel before 1.8.7-r1 and 1.9.0 through 1.10.5 contains a heap out- ...)
 	TODO: check



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b3a12f6f222279030a70ea6d5444610d035d83c0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b3a12f6f222279030a70ea6d5444610d035d83c0
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261016/9f88286f/attachment.htm>
