[Git][security-tracker-team/security-tracker][master] new json-smart issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7da6077b by Moritz Muehlenhoff at 2026-10-23T14:26:41+02:00
new json-smart issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -6428,7 +6428,9 @@ CVE-2026-113604 (Ghidra 10.2 through 12.1.4 contains a denial of service vulnera
 CVE-2026-113603 (The x402 SIWX server extension in @x402/extensions 2.3.1 through 2.28. ...)
 	NOT-FOR-US: x402 SIWX
 CVE-2026-113602 (json-smart through 2.6.0 contains an input validation bypass vulnerabi ...)
-	TODO: check
+	- json-smart <unfixed>
+	[trixie] - json-smart <no-dsa> (Minor issue)
+	NOTE: https://github.com/netplex/json-smart-v2/issues/302
 CVE-2026-113601 (Memos before 0.27.0 contains a missing authorization vulnerability in  ...)
 	TODO: check
 CVE-2026-113600 (Fat Free CRM before 0.26.0 contains an insecure direct object referenc ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7da6077bd3bb94f9dcddba3d2d404a0ec7e8827b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7da6077bd3bb94f9dcddba3d2d404a0ec7e8827b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261023/9c13dd59/attachment.htm>