[Git][security-tracker-team/security-tracker][master] Add new mistune issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2544ff2b by Salvatore Bonaccorso at 2026-10-23T11:20:44+02:00
Add new mistune issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -403,23 +403,32 @@ CVE-2026-115357 (OpenBao before 2.6.4 and 2.7.x before 2.7.1 fails to write resp
 CVE-2026-115356 (OpenBao before 2.6.4 and 2.7.x before 2.7.1 does not verify, when rene ...)
 	- openbao <itp> (bug #1069794)
 CVE-2026-115355 (Mistune before 3.3.0 contains a path traversal vulnerability in the In ...)
-	TODO: check
+	- mistune 3.3.4-1
+	NOTE: https://github.com/lepture/mistune/security/advisories/GHSA-h7ww-273w-6cm8
 CVE-2026-115354 (Mistune before 3.3.0 contains a path traversal vulnerability in the op ...)
-	TODO: check
+	- mistune 3.3.4-1
+	NOTE: https://github.com/lepture/mistune/security/advisories/GHSA-jhcm-5rpf-j3wv
 CVE-2026-115353 (Mistune before 3.3.0 contains a path traversal vulnerability in the RS ...)
-	TODO: check
+	- mistune 3.3.4-1
+	NOTE: https://github.com/lepture/mistune/security/advisories/GHSA-9jjx-3hq3-hx4j
 CVE-2026-115352 (Mistune before 3.3.0 contains an algorithmic complexity vulnerability  ...)
-	TODO: check
+	- mistune 3.3.4-1
+	NOTE: https://github.com/lepture/mistune/security/advisories/GHSA-xrpv-r66x-8p7j
 CVE-2026-115351 (Mistune from 3.2.1 before 3.3.0 contains a CSS injection vulnerability ...)
-	TODO: check
+	- mistune 3.3.4-1
+	NOTE: https://github.com/lepture/mistune/security/advisories/GHSA-xmwc-wjpr-q378
 CVE-2026-115350 (Mistune before 3.3.0 contains a cross-site scripting vulnerability in  ...)
-	TODO: check
+	- mistune 3.3.4-1
+	NOTE: https://github.com/lepture/mistune/security/advisories/GHSA-96vr-jm8v-g22j
 CVE-2026-115349 (Mistune from 3.0.0 before 3.3.0 contains an algorithmic complexity den ...)
-	TODO: check
+	- mistune 3.3.4-1
+	NOTE: https://github.com/lepture/mistune/security/advisories/GHSA-3q64-rw38-243v
 CVE-2026-115348 (Mistune from 3.0.0 before 3.3.0 contains an algorithmic complexity vul ...)
-	TODO: check
+	- mistune 3.3.4-1
+	NOTE: https://github.com/lepture/mistune/security/advisories/GHSA-x2gr-6qf2-fc9x
 CVE-2026-115347 (Mistune before 3.3.0 contains an inefficient algorithmic complexity vu ...)
-	TODO: check
+	- mistune 3.3.4-1
+	NOTE: https://github.com/lepture/mistune/security/advisories/GHSA-f32h-38gf-rg5r
 CVE-2026-115334 (Lotus through 0.10.2 contains an authorization bypass vulnerability in ...)
 	TODO: check
 CVE-2026-115333 (Lotus through 0.10.2 contains an improper authentication vulnerability ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2544ff2b4e9b47b1ccd58517c3c1c05d381be727

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2544ff2b4e9b47b1ccd58517c3c1c05d381be727
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261023/d4ede873/attachment-0001.htm>