[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Oct 20 08:13:20 BST 2026 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5740b3a5 by security tracker role at 2026-10-20T07:13:10+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,10 +1,528 @@
+CVE-2026-97627 (Hidden functionality issue exists in Multiple DVRs (Digital Video Reco ...)
+	TODO: check
+CVE-2026-96903 (The Easy Property Listings WordPress plugin before 3.5.27 does not per ...)
+	TODO: check
+CVE-2026-96902 (The Easy Property Listings WordPress plugin before 3.5.28 does not res ...)
+	TODO: check
+CVE-2026-93878 (The DiviGear Carousel plugin for WordPress is vulnerable to Stored Cro ...)
+	TODO: check
+CVE-2026-93300 (The EventON - Subscriber plugin for WordPress is vulnerable to generic ...)
+	TODO: check
+CVE-2026-8355 (IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a se ...)
+	TODO: check
+CVE-2026-86981 (An out-of-bounds write issue was addressed with improved bounds checki ...)
+	TODO: check
+CVE-2026-86979 (A privacy issue was addressed with improved checks. This issue is fixe ...)
+	TODO: check
+CVE-2026-86977 (An authorization issue was addressed with improved network restriction ...)
+	TODO: check
+CVE-2026-86976 (An authorization issue was addressed with improved state management. T ...)
+	TODO: check
+CVE-2026-86975 (An out-of-bounds read was addressed with improved bounds checking. Thi ...)
+	TODO: check
+CVE-2026-86963 (A denial-of-service issue was addressed with improved input validation ...)
+	TODO: check
+CVE-2026-86962 (A double free issue was addressed with improved memory management. Thi ...)
+	TODO: check
+CVE-2026-86961 (A race condition was addressed with additional validation. This issue  ...)
+	TODO: check
+CVE-2026-86959 (An input validation issue was addressed with improved input validation ...)
+	TODO: check
+CVE-2026-86957 (An out-of-bounds read was addressed with improved bounds checking. Thi ...)
+	TODO: check
+CVE-2026-86955 (An authorization issue was addressed with improved state management. T ...)
+	TODO: check
+CVE-2026-86953 (An out-of-bounds write issue was addressed with improved bounds checki ...)
+	TODO: check
+CVE-2026-86949 (This issue was addressed by enforcing library validation on the affect ...)
+	TODO: check
+CVE-2026-86948 (This issue was addressed by enforcing library validation on the affect ...)
+	TODO: check
+CVE-2026-86944 (An out-of-bounds write issue was addressed with improved bounds checki ...)
+	TODO: check
+CVE-2026-86940 (This issue was addressed by removing the vulnerable code. This issue i ...)
+	TODO: check
+CVE-2026-86935 (This issue was addressed by removing additional entitlements. This iss ...)
+	TODO: check
+CVE-2026-86933 (A permissions issue was addressed with additional sandbox restrictions ...)
+	TODO: check
+CVE-2026-86932 (An authorization issue was addressed with improved state management. T ...)
+	TODO: check
+CVE-2026-86928 (A path handling issue was addressed with improved validation. This iss ...)
+	TODO: check
+CVE-2026-86922 (A type confusion issue was addressed with improved state management. T ...)
+	TODO: check
+CVE-2026-86921 (A permissions issue was addressed with improved validation. This issue ...)
+	TODO: check
+CVE-2026-86919 (A stack overflow was addressed with improved input validation. This is ...)
+	TODO: check
+CVE-2026-86918 (An out-of-bounds write issue was addressed with improved bounds checki ...)
+	TODO: check
+CVE-2026-86915 (A race condition was addressed with improved locking. This issue is fi ...)
+	TODO: check
+CVE-2026-86914 (An information disclosure issue was addressed with improved state mana ...)
+	TODO: check
+CVE-2026-86913 (A use after free issue was addressed with improved memory management.  ...)
+	TODO: check
+CVE-2026-86907 (An authorization issue was addressed with improved entitlement checks. ...)
+	TODO: check
+CVE-2026-86875 (An input validation issue was addressed with improved input validation ...)
+	TODO: check
+CVE-2026-86874 (An out-of-bounds read was addressed with improved input validation. Th ...)
+	TODO: check
+CVE-2026-86872 (A logic issue was addressed with improved state management. This issue ...)
+	TODO: check
+CVE-2026-86871 (An integer underflow was addressed with improved input validation. Thi ...)
+	TODO: check
+CVE-2026-86868 (An authentication issue was addressed with improved state management.  ...)
+	TODO: check
+CVE-2026-86467 (Apache Airflow Amazon provider: the AWS auth manager's SAML login flow ...)
+	TODO: check
+CVE-2026-84613 (An out-of-bounds write issue was addressed with improved bounds checki ...)
+	TODO: check
+CVE-2026-84582 (A privacy issue was addressed with improved access restrictions. This  ...)
+	TODO: check
+CVE-2026-84579 (A logic issue was addressed with improved checks. This issue is fixed  ...)
+	TODO: check
+CVE-2026-84547 (A memory corruption issue was addressed with improved input validation ...)
+	TODO: check
+CVE-2026-84508 (This issue was addressed with improved validation of the caller's acce ...)
+	TODO: check
+CVE-2026-84490 (This issue was addressed through improved state management. This issue ...)
+	TODO: check
+CVE-2026-82166 (Dell Application Store, versions prior to 26.05.0.7, contain a Missing ...)
+	TODO: check
+CVE-2026-77938 (Letta through 0.16.8 contains an information disclosure vulnerability  ...)
+	TODO: check
+CVE-2026-77937 (Letta through 0.16.8 contains an authentication bypass vulnerability t ...)
+	TODO: check
+CVE-2026-77936 (Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_S ...)
+	TODO: check
+CVE-2026-77935 (Coze Studio through 0.5.1 contains an insecure direct object reference ...)
+	TODO: check
+CVE-2026-77934 (Coze Studio before 0.5.0 contains an insecure default configuration th ...)
+	TODO: check
+CVE-2026-77933 (DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in ...)
+	TODO: check
+CVE-2026-77932 (DB-GPT through 0.8.2 contains an unauthenticated remote code execution ...)
+	TODO: check
+CVE-2026-77930 (EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerabil ...)
+	TODO: check
+CVE-2026-77926 (Aix-DB 1.2.4 contains a remote code execution vulnerability that allow ...)
+	TODO: check
+CVE-2026-77684 (The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/h ...)
+	TODO: check
+CVE-2026-76788 (The OSDP Control Panel reply parser cp_decode_response() in subsys/mgm ...)
+	TODO: check
+CVE-2026-76787 (The UpdateHub firmware-over-the-air client parses the CoAP probe respo ...)
+	TODO: check
+CVE-2026-75753 (Missing Authentication for a Critical Function in certain ASUS routers ...)
+	TODO: check
+CVE-2026-75128 (Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endp ...)
+	TODO: check
+CVE-2026-71170 (Dell Application Store, versions prior to 26.05.0.7, contains an Uncon ...)
+	TODO: check
+CVE-2026-71169 (Dell Application Store, versions prior to 26.05.0.7, contain an Incorr ...)
+	TODO: check
+CVE-2026-65396 (A buffer overflow was addressed with improved size validation. This is ...)
+	TODO: check
+CVE-2026-65379 (The issue was addressed with improved handling of secure input state.  ...)
+	TODO: check
+CVE-2026-65372 (A race condition was addressed with additional validation. This issue  ...)
+	TODO: check
+CVE-2026-65356 (An access issue was addressed with improved access controls. This issu ...)
+	TODO: check
+CVE-2026-57529
+	REJECTED
+CVE-2026-57528
+	REJECTED
+CVE-2026-57526
+	REJECTED
+CVE-2026-57519
+	REJECTED
+CVE-2026-57515
+	REJECTED
+CVE-2026-57514
+	REJECTED
+CVE-2026-57513
+	REJECTED
+CVE-2026-57512
+	REJECTED
+CVE-2026-56714
+	REJECTED
+CVE-2026-53995 (MLflow 3.17.1 and earlier contains a path traversal vulnerability in t ...)
+	TODO: check
+CVE-2026-28854 (The issue was addressed with additional app bundle integrity checks. T ...)
+	TODO: check
+CVE-2026-28853 (The issue was addressed with improved checks. This issue is fixed in m ...)
+	TODO: check
+CVE-2026-28850 (An authorization issue was addressed with improved state management. T ...)
+	TODO: check
+CVE-2026-19595 (The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in ...)
+	TODO: check
+CVE-2026-19178 (IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remo ...)
+	TODO: check
+CVE-2026-17518 (Buffer Copy without Checking Size of Input in certain ASUS router mode ...)
+	TODO: check
+CVE-2026-12489 (An incorrect authorization vulnerability in the Data Access Layer (DAL ...)
+	TODO: check
+CVE-2026-113404 (WebITR developed by Uniong has a Insecure Deserialization vulnerabilit ...)
+	TODO: check
+CVE-2026-113402 (ArmorX Spam developed by ArmorX Global Technology has a Local File Inc ...)
+	TODO: check
+CVE-2026-113386 (Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by ...)
+	TODO: check
+CVE-2026-113380 (In the RingRTC library before 2.72.0 for Signal, a peer that saturates ...)
+	TODO: check
+CVE-2026-112991 (The html_to_markdown expansion module in MISP Modules contains a serve ...)
+	TODO: check
+CVE-2026-112901 (Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM head ...)
+	TODO: check
+CVE-2026-112900 (Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is ...)
+	TODO: check
+CVE-2026-112898 (Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow ca ...)
+	TODO: check
+CVE-2026-112897 (Pillow is a Python imaging library. From 5.3.0 until 13.0.0, Pillow ca ...)
+	TODO: check
+CVE-2026-112896 (Pillow is a Python imaging library. Prior to 13.0.0, Pillow's TIFF enc ...)
+	TODO: check
+CVE-2026-112895 (Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow ca ...)
+	TODO: check
+CVE-2026-112894 (Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow ta ...)
+	TODO: check
+CVE-2026-112893 (Pillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow c ...)
+	TODO: check
+CVE-2026-112892 (Pillow is a Python imaging library. From 4.1.0 until 13.0.0, Pillow's  ...)
+	TODO: check
+CVE-2026-112891 (Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow pe ...)
+	TODO: check
+CVE-2026-112782 (Grav 1.7.53 before 1.7.53.5 and 2.0.0-rc.8 before 2.2.2 contains a res ...)
+	TODO: check
+CVE-2026-112781 (Grav from 2.0.0 before 2.2.2 contains an information disclosure vulner ...)
+	TODO: check
+CVE-2026-112780 (Grav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerabili ...)
+	TODO: check
+CVE-2026-112779 (Grav API plugin (grav-plugin-api) 1.0.40 before 1.0.42 caches a full t ...)
+	TODO: check
+CVE-2026-112778 (Traefik before 2.11.46, 3.x before 3.6.17, and 3.7.0 lack namespace va ...)
+	TODO: check
+CVE-2026-112777 (Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a blocklist ...)
+	TODO: check
+CVE-2026-112776 (Craft CMS from 5.0.0 before 5.11.0 contains an authorization bypass vu ...)
+	TODO: check
+CVE-2026-112775 (Craft CMS from 5.0.0 before 5.11.0 contains an authentication bypass v ...)
+	TODO: check
+CVE-2026-112774 (Craft CMS from 5.8.0 before 5.11.0 contains a remote code execution vu ...)
+	TODO: check
+CVE-2026-112773 (Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vu ...)
+	TODO: check
+CVE-2026-112772 (Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vu ...)
+	TODO: check
+CVE-2026-112771 (Craft CMS 4.0.0 before 4.18.8 and 5.0.0 before 5.11.0 contains a Twig  ...)
+	TODO: check
+CVE-2026-112770 (Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a remote co ...)
+	TODO: check
+CVE-2026-112769 (Parse Server before 8.6.98 and 9.0.0 before 9.10.3-alpha.1 does not en ...)
+	TODO: check
+CVE-2026-112768 (Parse Server before 8.6.99 and 9.0.0 before 9.10.3-alpha.2 evaluates c ...)
+	TODO: check
+CVE-2026-112406 (Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow ca ...)
+	TODO: check
+CVE-2026-112405 (Pillow is a Python imaging library. From 12.0.0 until 13.0.0, Pillow's ...)
+	TODO: check
+CVE-2026-112404 (Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow's  ...)
+	TODO: check
+CVE-2026-112403 (Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG dec ...)
+	TODO: check
+CVE-2026-112402 (Pillow is a Python imaging library. Prior to 13.0.0, Pillow can double ...)
+	TODO: check
+CVE-2026-112401 (Pillow is a Python imaging library. From 5.4.0 until 13.0.0, Pillow pe ...)
+	TODO: check
+CVE-2026-112400 (Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow ca ...)
+	TODO: check
+CVE-2026-112399 (Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow ca ...)
+	TODO: check
+CVE-2026-112398 (Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix ...)
+	TODO: check
+CVE-2026-112397 (Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMor ...)
+	TODO: check
+CVE-2026-112396 (Pillow is a Python imaging library. From 11.3.0 until 13.0.0, Pillow h ...)
+	TODO: check
+CVE-2026-112395 (Pillow is a Python imaging library. From 8.2.0 until 13.0.0, Pillow's  ...)
+	TODO: check
+CVE-2026-112394 (Pillow is a Python imaging library. Prior to 13.0.0, Pillow's P;2L and ...)
+	TODO: check
+CVE-2026-112393 (Pillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow ha ...)
+	TODO: check
+CVE-2026-112392 (Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-bas ...)
+	TODO: check
+CVE-2026-112391 (Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow's  ...)
+	TODO: check
+CVE-2026-112390 (Pillow is a Python imaging library. From 7.2.0 until 13.0.0, Pillow ca ...)
+	TODO: check
+CVE-2026-112373 (A security vulnerability has been detected in H3C Magic NX15 NX15V100R ...)
+	TODO: check
+CVE-2026-112372 (A weakness has been identified in H3C Magic NX15 V100R017. This affect ...)
+	TODO: check
+CVE-2026-112371 (A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacte ...)
+	TODO: check
+CVE-2026-112370 (A vulnerability was found in H3C Magic NX15 100R017. This issue affect ...)
+	TODO: check
+CVE-2026-112361 (A vulnerability has been found in Dolibarr up to 23.0.2. The impacted  ...)
+	TODO: check
+CVE-2026-112360 (A security vulnerability has been detected in Netis EAP930 1.250905.11 ...)
+	TODO: check
+CVE-2026-112358 (A weakness has been identified in TiBillet Lespass up to 10e87909c5d52 ...)
+	TODO: check
+CVE-2026-112302 (A weakness has been identified in kiwilan php-archive up to 2.3.02. Th ...)
+	TODO: check
+CVE-2026-112301 (A security flaw has been discovered in orbitale imagemagick-php up to  ...)
+	TODO: check
+CVE-2026-112300 (A vulnerability was identified in DiffSK configobj up to 5.0.9. Affect ...)
+	TODO: check
+CVE-2026-112299 (A vulnerability was determined in smrealms smr up to f40380c017bc35cd8 ...)
+	TODO: check
+CVE-2026-112297 (A flaw has been found in ptbsare anx-calibre-manager up to 1.13.12. Th ...)
+	TODO: check
+CVE-2026-112261 (A flaw was found in GIMP. Opening a crafted XCF that selects a path an ...)
+	TODO: check
+CVE-2026-112260 (A flaw was found in GIMP. Opening a crafted XCF with a malformed text- ...)
+	TODO: check
+CVE-2026-112258 (A flaw was found in GIMP. The XCF loader can leave a dangling pointer  ...)
+	TODO: check
+CVE-2026-112257 (A flaw was found in GIMP. The PSD thumbnail resource loader performs a ...)
+	TODO: check
+CVE-2026-112254 (A vulnerability was found in agit8or1 clientst0r up to 3.17.586. Affec ...)
+	TODO: check
+CVE-2026-112148 (A vulnerability has been identified in LIFF SDK versions 2.20.0 throug ...)
+	TODO: check
+CVE-2026-111766 (markdown-it is a Markdown parser. Prior to 14.3.3 and 15.0.3, when the ...)
+	TODO: check
+CVE-2026-110095 (fast-uri is a dependency-free RFC 3986 URI parser and serializer for N ...)
+	TODO: check
+CVE-2026-109831 (UnRTF by GNU Project is vulnerable to out-of-bounds write. If a user o ...)
+	TODO: check
+CVE-2026-109444 (OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulner ...)
+	TODO: check
+CVE-2026-109443 (JoySafeter through 1.0.0 contains a remote code execution vulnerabilit ...)
+	TODO: check
+CVE-2026-109442 (piflow 2.0.0 through 2.0.1 contains a remote code execution vulnerabil ...)
+	TODO: check
+CVE-2026-109441 (LangAlpha through 2026.09.07 contains an improper isolation vulnerabil ...)
+	TODO: check
+CVE-2026-109440 (LangAlpha through 2026.09.07 contains an indirect prompt injection vul ...)
+	TODO: check
+CVE-2026-109395 (Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access ...)
+	TODO: check
+CVE-2026-109126 (IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10. ...)
+	TODO: check
+CVE-2026-107400 (IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a rem ...)
+	TODO: check
+CVE-2026-107366 (IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints ...)
+	TODO: check
+CVE-2026-105815 (TP-Link Tapo C210 V3.60 may expose shared credential material and cryp ...)
+	TODO: check
+CVE-2026-105814 (TP-Link Tapo C210 V3.60 contains an authentication bypass vulnerabilit ...)
+	TODO: check
+CVE-2026-105453 (IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and6.4.0. ...)
+	TODO: check
+CVE-2026-105299 (Summary    Before version 0.9.0, the HTTP/1 upstream path in pingora-p ...)
+	TODO: check
+CVE-2026-105298 (Summary    Before version 0.9.0, Pingora accepted HTTP/2 requests whos ...)
+	TODO: check
+CVE-2026-105297 (Summary    Before version 0.8.1, Pingora's HTTP/2 server used the h2 c ...)
+	TODO: check
+CVE-2026-102438 (An uncontrolled search path element vulnerability in ASUS Armoury Crat ...)
+	TODO: check
+CVE-2026-100737 (Hidden functionality issue exists in Multiple DVRs (Digital Video Reco ...)
+	TODO: check
+CVE-2025-36252 (IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Li ...)
+	TODO: check
+CVE-2025-36069 (IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidat ...)
+	TODO: check
+CVE-2025-36061 (IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Ta ...)
+	TODO: check
+CVE-2024-54657
+	REJECTED
+CVE-2024-54656
+	REJECTED
+CVE-2024-54655
+	REJECTED
+CVE-2024-54654
+	REJECTED
+CVE-2024-54653
+	REJECTED
+CVE-2024-54652
+	REJECTED
+CVE-2024-54651
+	REJECTED
+CVE-2024-54650
+	REJECTED
+CVE-2024-54649
+	REJECTED
+CVE-2024-54648
+	REJECTED
+CVE-2024-54647
+	REJECTED
+CVE-2024-54646
+	REJECTED
+CVE-2024-54645
+	REJECTED
+CVE-2024-54644
+	REJECTED
+CVE-2024-54643
+	REJECTED
+CVE-2024-54642
+	REJECTED
+CVE-2024-54641
+	REJECTED
+CVE-2024-54640
+	REJECTED
+CVE-2024-54639
+	REJECTED
+CVE-2024-54638
+	REJECTED
+CVE-2024-54637
+	REJECTED
+CVE-2024-54636
+	REJECTED
+CVE-2024-54635
+	REJECTED
+CVE-2024-54634
+	REJECTED
+CVE-2024-54633
+	REJECTED
+CVE-2024-54632
+	REJECTED
+CVE-2024-54631
+	REJECTED
+CVE-2024-54630
+	REJECTED
+CVE-2024-54629
+	REJECTED
+CVE-2024-54628
+	REJECTED
+CVE-2024-54627
+	REJECTED
+CVE-2024-54626
+	REJECTED
+CVE-2024-54625
+	REJECTED
+CVE-2024-54624
+	REJECTED
+CVE-2024-54623
+	REJECTED
+CVE-2024-54622
+	REJECTED
+CVE-2024-54621
+	REJECTED
+CVE-2024-54620
+	REJECTED
+CVE-2024-54619
+	REJECTED
+CVE-2024-54618
+	REJECTED
+CVE-2024-54617
+	REJECTED
+CVE-2024-54616
+	REJECTED
+CVE-2024-54615
+	REJECTED
+CVE-2024-54614
+	REJECTED
+CVE-2024-54613
+	REJECTED
+CVE-2024-54612
+	REJECTED
+CVE-2024-54611
+	REJECTED
+CVE-2024-54610
+	REJECTED
+CVE-2024-54609
+	REJECTED
+CVE-2024-54608
+	REJECTED
+CVE-2024-54607
+	REJECTED
+CVE-2024-54606
+	REJECTED
+CVE-2024-54605
+	REJECTED
+CVE-2024-54604
+	REJECTED
+CVE-2024-54603
+	REJECTED
+CVE-2024-54602
+	REJECTED
+CVE-2024-54601
+	REJECTED
+CVE-2024-54600
+	REJECTED
+CVE-2024-54599
+	REJECTED
+CVE-2024-54598
+	REJECTED
+CVE-2024-54597
+	REJECTED
+CVE-2024-54596
+	REJECTED
+CVE-2024-54595
+	REJECTED
+CVE-2024-54594
+	REJECTED
+CVE-2024-54593
+	REJECTED
+CVE-2024-54592
+	REJECTED
+CVE-2024-54591
+	REJECTED
+CVE-2024-54590
+	REJECTED
+CVE-2024-54589
+	REJECTED
+CVE-2024-54588
+	REJECTED
+CVE-2024-54587
+	REJECTED
+CVE-2024-54586
+	REJECTED
+CVE-2024-54585
+	REJECTED
+CVE-2024-54584
+	REJECTED
+CVE-2024-54583
+	REJECTED
+CVE-2024-54582
+	REJECTED
+CVE-2024-54581
+	REJECTED
+CVE-2023-42999
+	REJECTED
+CVE-2023-42998
+	REJECTED
+CVE-2023-42997
+	REJECTED
+CVE-2023-42996
+	REJECTED
+CVE-2023-42995
+	REJECTED
+CVE-2023-42994
+	REJECTED
+CVE-2023-42993
+	REJECTED
+CVE-2023-42992
+	REJECTED
+CVE-2023-42991
+	REJECTED
+CVE-2023-42990
+	REJECTED
 CVE-2026-108518
 	- libdbi-perl <unfixed>
 	NOTE: Fixed by: https://github.com/perl5-dbi/dbi/commit/c2ff4df575d7af625bb4d0d1ef7539f90b22d8b2 (1.656)
 CVE-2026-111879
 	- libdbi-perl <unfixed>
 	NOTE: Fixed by: https://github.com/perl5-dbi/dbi/commit/99bbf2ab9d137e6f042a770bd3bbba3bc0b3a901 (1.656)
-CVE-2026-111946
+CVE-2026-111946 (Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclo ...)
 	NOT-FOR-US: Plack::Middleware::ETag Perl module
 CVE-2026-XXXX [Fix IMAP command injection via CRLF in _uid parameter of mail/headers and mail/viewsource action]
 	- roundcube 1.6.20+dfsg-1 (bug #1151279)
@@ -281,7 +799,7 @@ CVE-2026-112329 (The Sensei LMS WordPress plugin before 4.26.4 contains a broken
 	NOT-FOR-US: WordPress plugin
 CVE-2026-112328 (The Sensei LMS WordPress plugin before 4.26.4 contains a broken access ...)
 	NOT-FOR-US: WordPress plugin
-CVE-2026-112310 (docling-core through 2.102.0 contains a local file disclosure vulnerab ...)
+CVE-2026-112310 (docling-core 2.5.0 before 2.103.0 contains a local file disclosure vul ...)
 	NOT-FOR-US: docling-core
 CVE-2026-112309 (@rvf/set-get before 7.0.4 contains a prototype pollution vulnerability ...)
 	NOT-FOR-US: Node @rvf/set-get
@@ -666,7 +1184,7 @@ CVE-2026-104679 (VOCALOID6 Editor provided by Yamaha Corporation improperly rest
 	NOT-FOR-US: VOCALOID6
 CVE-2026-103314 (A flaw was found in Red Hat Advanced Cluster Security for Kubernetes ( ...)
 	NOT-FOR-US: Red Hat
-CVE-2026-103038 (PingTools Network Utilities 4.64 Free accepts an arbitrary value in th ...)
+CVE-2026-103038 (PingTools Network Utilities 4.64 contains an OS command injection vuln ...)
 	NOT-FOR-US: PingTools Network Utilities
 CVE-2025-7203 (The Management Console and product files expose sensitive data, includ ...)
 	NOT-FOR-US: WSO2
@@ -20774,6 +21292,7 @@ CVE-2025-45871 (LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind
 CVE-2025-15591 (Cross-site Scripting (XSS) in the Forums feature of OpenText Content M ...)
 	NOT-FOR-US: OpenText
 CVE-2026-77050 (An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9,  ...)
+	{DLA-4843-1}
 	- python-django 3:5.2.18-1 (bug #1150176)
 	NOTE: https://www.djangoproject.com/weblog/2026/oct/06/security-releases/
 	NOTE: Fixed by: https://github.com/django/django/commit/02a69e3791e3df23d45ea4ea7e7fc489f0eef2be (5.2.18)
@@ -20789,6 +21308,7 @@ CVE-2026-87890 (An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6
 	NOTE: https://www.djangoproject.com/weblog/2026/oct/06/security-releases/
 	NOTE: Fixed by: https://github.com/django/django/commit/dd0558d1617619e0d66163675ef02135d0f54e5f (5.2.18)
 CVE-2026-87975 (An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9,  ...)
+	{DLA-4843-1}
 	- python-django 3:5.2.18-1 (bug #1150176)
 	NOTE: https://www.djangoproject.com/weblog/2026/oct/06/security-releases/
 	NOTE: Fixed by: https://github.com/django/django/commit/ff27883ca055aa9ab23015b50674a5b10dfe5a41 (5.2.18)
@@ -66619,7 +67139,7 @@ CVE-2026-33465 (Allocation of Resources Without Limits or Throttling (CWE-770) i
 	NOT-FOR-US: Elastic
 CVE-2026-19766 (An authentication bypass vulnerability exists in the underlying operat ...)
 	NOT-FOR-US: HPE
-CVE-2026-19754 (Baserow 2.3.3 contains a SQL injection vulnerability in the index() fo ...)
+CVE-2026-19754 (Baserow versions 2.2.0 through 2.3.3 contain an SQL injection vulnerab ...)
 	NOT-FOR-US: Baserow
 CVE-2026-19723 (The Social Media Share Buttons & Social Sharing Icons WordPress plugin ...)
 	NOT-FOR-US: WordPress plugin



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5740b3a52bfcea122b26d2c84b6d84cd48e4a7ce

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5740b3a52bfcea122b26d2c84b6d84cd48e4a7ce
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261020/60648f25/attachment-0001.htm>

More information about the debian-security-tracker-commits mailing list