[Git][security-tracker-team/security-tracker][master] automatic update

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
302de639 by security tracker role at 2026-10-19T07:13:59+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,149 @@
+CVE-2026-97859 (Seven Gitea API routes under `/api/v1/users/{username}` (followers, fo ...)
+	TODO: check
+CVE-2026-97204 (Deleting a label compared the ID of the repository in the request agai ...)
+	TODO: check
+CVE-2026-94294 (The App Builder WordPress plugin before 5.7.1 does not require authent ...)
+	TODO: check
+CVE-2026-94273 (The Snap Finance WordPress plugin through 3.11.0 does not verify that  ...)
+	TODO: check
+CVE-2026-94272 (The Snap Finance WordPress plugin before 3.12.0 does not verify that a ...)
+	TODO: check
+CVE-2026-94231 (The TrueBooker WordPress plugin before 1.3.0 does not have authorisati ...)
+	TODO: check
+CVE-2026-94230 (The TrueBooker WordPress plugin before 1.3.0 does not have authorisati ...)
+	TODO: check
+CVE-2026-94229 (The TrueBooker WordPress plugin before 1.3.0 does not verify that the  ...)
+	TODO: check
+CVE-2026-94228 (The TrueBooker WordPress plugin before 1.3.0 does not perform any capa ...)
+	TODO: check
+CVE-2026-91831 (The Subscribe to Comments WordPress plugin before 2.3.3 does not sanit ...)
+	TODO: check
+CVE-2026-91047 (The ElementsReady Addons for Elementor WordPress plugin through 6.7.2  ...)
+	TODO: check
+CVE-2026-91046 (The ElementsReady Addons for Elementor WordPress plugin through 6.7.2  ...)
+	TODO: check
+CVE-2026-89286 (The FormFlow for GoHighLevel (GHL)  WordPress plugin through 1.0.0 doe ...)
+	TODO: check
+CVE-2026-86791 (The iPOSpays Payment Gateway for WooCommerce WordPress plugin before 1 ...)
+	TODO: check
+CVE-2026-76740 (A security vulnerability in HPE Compute Scale-up Server 3200 and 3250  ...)
+	TODO: check
+CVE-2026-76739 (A potential security vulnerability in HPE Compute Scale-up Server 3200 ...)
+	TODO: check
+CVE-2026-74922 (The Document Gallery WordPress plugin through 5.1.1 does not verify th ...)
+	TODO: check
+CVE-2026-74921 (The Document Gallery WordPress plugin through 5.1.1 does not sanitise  ...)
+	TODO: check
+CVE-2026-16487 (A flaw was found in bootc when operating with the default containers s ...)
+	TODO: check
+CVE-2026-16460 (A flaw was found in bootc and ostree. Already-staged deployments are f ...)
+	TODO: check
+CVE-2026-112112 (An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing ...)
+	TODO: check
+CVE-2026-112111 (The Bootstrap Shortcodes plugin for WordPress before 3.4.6 is vulnerab ...)
+	TODO: check
+CVE-2026-112089 (A security vulnerability has been detected in Dav-ee dairy-management- ...)
+	TODO: check
+CVE-2026-112088 (A weakness has been identified in Dav-ee dairy-management-system 31ace ...)
+	TODO: check
+CVE-2026-112087 (A weakness has been identified in itsourcecode Online Cake Ordering Sy ...)
+	TODO: check
+CVE-2026-112086 (A vulnerability was found in ESPnet up to 202610.post2. This affects t ...)
+	TODO: check
+CVE-2026-112083 (A security flaw has been discovered in sgl-project SGLang up to 0.5.19 ...)
+	TODO: check
+CVE-2026-112082 (A vulnerability was identified in sgl-project SGLang up to 0.5.19. Thi ...)
+	TODO: check
+CVE-2026-112081 (A vulnerability was determined in hankcs HanLP up to 2.1.0-beta.64. Th ...)
+	TODO: check
+CVE-2026-112080 (A vulnerability was found in LlamaChinese Llama-Chinese up to 6fa0fffb ...)
+	TODO: check
+CVE-2026-112079 (A vulnerability has been found in hankcs HanLP up to 2.1.0-beta.64. Th ...)
+	TODO: check
+CVE-2026-112078 (A flaw has been found in RVC-Project Retrieval-based-Voice-Conversion- ...)
+	TODO: check
+CVE-2026-112077 (A vulnerability was detected in radareorg radare2 6.2.0/6.2.2. This is ...)
+	TODO: check
+CVE-2026-112076 (A security vulnerability has been detected in alexta69 MeTube up to 20 ...)
+	TODO: check
+CVE-2026-112075 (A weakness has been identified in unslothai unsloth up to 0.1.501-beta ...)
+	TODO: check
+CVE-2026-112074 (A security flaw has been discovered in Tencent ncnn up to 44b02dabdcf9 ...)
+	TODO: check
+CVE-2026-112073 (A vulnerability was identified in Tencent ncnn up to 44b02dabdcf974992 ...)
+	TODO: check
+CVE-2026-112045 (A vulnerability was detected in donetick up to 0.1.82. The impacted el ...)
+	TODO: check
+CVE-2026-112044 (A security vulnerability has been detected in dotnet eShop up to 913ac ...)
+	TODO: check
+CVE-2026-112043 (A weakness has been identified in calcom cal.com and cal.diy up to 6.2 ...)
+	TODO: check
+CVE-2026-112042 (A security flaw has been discovered in diem-project diem up to 116974e ...)
+	TODO: check
+CVE-2026-112041 (A vulnerability was identified in diem-project diem up to 116974edfb9a ...)
+	TODO: check
+CVE-2026-112040 (A vulnerability was determined in diem-project diem up to 116974edfb9a ...)
+	TODO: check
+CVE-2026-112039 (A vulnerability was found in diem-project diem up to 116974edfb9a5b8bd ...)
+	TODO: check
+CVE-2026-112038 (A vulnerability has been found in diem-project diem up to 116974edfb9a ...)
+	TODO: check
+CVE-2026-112037 (A flaw has been found in diem-project diem up to 116974edfb9a5b8bd69cb ...)
+	TODO: check
+CVE-2026-112036 (A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impac ...)
+	TODO: check
+CVE-2026-112035 (A security vulnerability has been detected in aircheng-org iWebShop-5  ...)
+	TODO: check
+CVE-2026-112034 (A weakness has been identified in aircheng-org iWebShop-5 up to 5.16.  ...)
+	TODO: check
+CVE-2026-112033 (A security flaw has been discovered in aircheng-org iWebShop-5 up to 5 ...)
+	TODO: check
+CVE-2026-112032 (A vulnerability was identified in aircheng-org iWebShop-5 up to 5.16.  ...)
+	TODO: check
+CVE-2026-112031 (A vulnerability was determined in Chamilo LMS up to 1.11.40/2.0.3/3.0. ...)
+	TODO: check
+CVE-2026-112030 (A vulnerability was found in diem-project diem up to 5.1.3. This vulne ...)
+	TODO: check
+CVE-2026-112029 (A vulnerability has been found in diem-project diem up to 5.1.3. This  ...)
+	TODO: check
+CVE-2026-112028 (A flaw has been found in light0011 cms c774dce31c6df0055568a8d5c53d964 ...)
+	TODO: check
+CVE-2026-112027 (A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5 ...)
+	TODO: check
+CVE-2026-112026 (A security vulnerability has been detected in light0011 cms c774dce31c ...)
+	TODO: check
+CVE-2026-112025 (A weakness has been identified in light0011 cms c774dce31c6df0055568a8 ...)
+	TODO: check
+CVE-2026-111441 (\u5728 openGauss-server \u7684 src/gausskernel/cbb/utils/hll/hll.cpp \ ...)
+	TODO: check
+CVE-2026-111440 (\u5728 openGauss-connector-jdbc \u7684 pgjdbc/src/main/java/org/postgr ...)
+	TODO: check
+CVE-2026-110034 (The Salon Booking System WordPress plugin before 10.31.11 does not enf ...)
+	TODO: check
+CVE-2026-108984 (A vulnerability is in Web Server default connection ports under the pr ...)
+	TODO: check
+CVE-2026-108983 (A vulnerability is in Web Server default connection ports under the pr ...)
+	TODO: check
+CVE-2026-108519
+	REJECTED
+CVE-2026-108121 (Brian Mariani from DigitalCanion SA has discovereda vulnerability in t ...)
+	TODO: check
+CVE-2026-108120 (Brian Mariani from DigitalCanion SA has discovereda path traversal vul ...)
+	TODO: check
+CVE-2026-106933 (The Blaze Demo Importer WordPress plugin before 1.0.17 does not saniti ...)
+	TODO: check
+CVE-2026-106028 (The ActiveTrail for WooCommerce WordPress plugin through 1.2.6 does no ...)
+	TODO: check
+CVE-2026-106014 (The Gateway for Vantiv on WC WordPress plugin through 1.0.1 does not v ...)
+	TODO: check
+CVE-2026-106010 (The BDM Digital Payment Gateway WordPress plugin through 1.3.12 does n ...)
+	TODO: check
+CVE-2026-103311 (The Coinbase Commerce Payment Gateway for WooCommerce WordPress plugin ...)
+	TODO: check
+CVE-2026-103091 (Missing Authorization (CWE-862) and Initialization of a Resource with  ...)
+	TODO: check
+CVE-2026-102503 (Missing Authentication for Critical Function (CWE-306) and Missing Aut ...)
+	TODO: check
 CVE-2026-110336
 	- libplack-perl 1.0055-1 (unimportant; bug #1151241)
 	NOTE: Fixed by: https://github.com/plack/Plack/commit/92eba54ba698b4dad9009604064c9f9fe40e01eb (1.0055)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/302de63917c37938674fd550071963e70bdd128d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/302de63917c37938674fd550071963e70bdd128d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261019/9bb2ed6e/attachment-0001.htm>