[Git][security-tracker-team/security-tracker][master] CVE-2026-110856: Add commit link.

Emmanuel Arias (@eamanu) eamanu at debian.org
Sat Oct 17 17:36:20 BST 2026



Emmanuel Arias pushed to branch master at Debian Security Tracker / security-tracker


Commits:
816604bc by Emmanuel Arias at 2026-10-17T13:36:05-03:00
CVE-2026-110856: Add commit link.

Minor fix in CVE-2026-110855

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2396,10 +2396,11 @@ CVE-2026-110857 (GitPython before 3.2.0 contains a remote code execution vulnera
 CVE-2026-110856 (GitPython before 3.2.0 contains a regular expression denial of service ...)
 	- python-git <unfixed>
 	NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-m64x-33q8-m5h7
+	NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/71b954501c0de6e769d2e18a42de0d07484091cc (3.2.0)
 CVE-2026-110855 (GitPython before 3.2.0 contains an information disclosure vulnerabilit ...)
 	- python-git <unfixed>
 	NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-fx3j-rwgx-fr94
-	NOTE: Fixed by https://github.com/gitpython-developers/GitPython/commit/93f11925ad7c40e710e9ac0b4735f82792b1877f (3.2.0)
+	NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/93f11925ad7c40e710e9ac0b4735f82792b1877f (3.2.0)
 CVE-2026-110854 (Parse Server before 8.6.97 and 9.0.0 before 9.10.2-alpha.6 does not ha ...)
 	NOT-FOR-US: Parse Server
 CVE-2026-110853 (n8n before 1.123.83 contains an authorization bypass vulnerability tha ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/816604bca0dabd5e4672655dee84ac15095ccdfc

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/816604bca0dabd5e4672655dee84ac15095ccdfc
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261017/9807b98b/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list