[Git][security-tracker-team/security-tracker][master] Add new asm issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7b90c1db by Salvatore Bonaccorso at 2026-10-17T14:53:31+02:00
Add new asm issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3147,27 +3147,45 @@ CVE-2026-110593 (BottleCRM through 1.14.5 contains a server-side template inject
 CVE-2026-110592 (BottleCRM 0.30 through 1.14.5 contains an HTML injection vulnerability ...)
 	TODO: check
 CVE-2026-110591 (OW2 ASM 1.4.3 before 9.11 contains an excessive resource consumption v ...)
-	TODO: check
+	- asm <unfixed>
+	NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/468
+	NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/4632a2283f1192fd0e93035661b49568a7cb8b6c (ASM_9_11)
 CVE-2026-110536 (A vulnerability was determined in D-Link DIR-868L 2.01b05. This impact ...)
 	NOT-FOR-US: D-Link
 CVE-2026-110284 (The LifterLMS \u2013 WP LMS for eLearning, Online Courses, & Quizzes p ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-110270 (OW2 ASM 3.0 before 9.11 contains an uncontrolled memory allocation vul ...)
-	TODO: check
+	- asm <unfixed>
+	NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/466
+	NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/aef6bbd9d801177ece3e17f5dae13bfe65892a29 (ASM_9_11)
 CVE-2026-110263 (OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerabili ...)
-	TODO: check
+	- asm <unfixed>
+	NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/465
+	NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/a05e2081164fb799bf269362447227260439df7d (ASM_9_11)
 CVE-2026-110262 (OW2 ASM 3.1 before 9.11 contains an excessive memory allocation vulner ...)
-	TODO: check
+	- asm <unfixed>
+	NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/464
+	NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/0f8fa6126e76372dc91cae70f509d26075146d6c (ASM_9_11)
 CVE-2026-110261 (OW2 ASM 3.0 before 9.11 contains a denial of service vulnerability tha ...)
-	TODO: check
+	- asm <unfixed>
+	NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/463
+	NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/9465c9a5bc8a8ca104cb6c50eeb938c8957543b4 (ASM_9_11)
 CVE-2026-110260 (OW2 ASM 3.0 before 9.11 contains a quadratic memory allocation vulnera ...)
-	TODO: check
+	- asm <unfixed>
+	NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/461
+	NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/5b4c9dd2b92be982add6f11b64fcbbeb9ab09e13 (ASM_9_11)
 CVE-2026-110259 (OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerabili ...)
-	TODO: check
+	- asm <unfixed>
+	NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/459
+	NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/0cc889f35ba0ecb64fc49243cbe17524282c56d3 (ASM_9_11)
 CVE-2026-110258 (OW2 ASM 3.0 before 9.11 contains an excessive memory allocation vulner ...)
-	TODO: check
+	- asm <unfixed>
+	NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/458
+	NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/cefb8df53859777cc9e9dfbe3633cc28f694b7b7 (ASM_9_11)
 CVE-2026-110257 (OW2 ASM 5.0 before 9.11 contains an excessive memory allocation vulner ...)
-	TODO: check
+	- asm <unfixed>
+	NOTE: https://gitlab.ow2.org/asm/asm/-/merge_requests/456
+	NOTE: Fixed by: https://gitlab.ow2.org/asm/asm/-/commit/3630baec81088bc344ccfdf0574885a4f209a097 (ASM_9_11)
 CVE-2026-110248 (Insertion of sensitive information into log files in the git_utils[.]p ...)
 	NOT-FOR-US: Amazon
 CVE-2026-110227 (Missing Authorization vulnerability in 10up Restricted Site Access res ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7b90c1db4ca5bf698fca3a4907b3167959f91191

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7b90c1db4ca5bf698fca3a4907b3167959f91191
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261017/bd4705ec/attachment.htm>