[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for some issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f78ae581 by Salvatore Bonaccorso at 2026-10-23T22:16:38+02:00
Add Debian bug reference for some issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1215,7 +1215,7 @@ CVE-2026-115508 (Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular exp
 CVE-2026-115507 (Vikunja 2.2.0 before 2.7.1 contains an HTML injection vulnerability in ...)
 	NOT-FOR-US: Vikunja
 CVE-2026-115506 (libexpat through 2.9.0 contains a denial of service vulnerability beca ...)
-	- expat <unfixed>
+	- expat <unfixed> (bug #1151841)
 	NOTE: https://github.com/libexpat/libexpat/pull/1433
 CVE-2026-115505 (libsmb2 before 6.3 contains integer overflow vulnerabilities in the DC ...)
 	- libsmb2 <undetermined>
@@ -1663,7 +1663,7 @@ CVE-2026-111737 (The Speed Optimizer  WordPress plugin before 7.8.5 does not san
 CVE-2026-111594 (InterSystems IRIS for Health has TLS/SSL encryption turned off by defa ...)
 	NOT-FOR-US: InterSystems IRIS
 CVE-2026-111181 (body-parser is body parsing middleware for Node.js and Express. In ver ...)
-	- node-body-parser <unfixed>
+	- node-body-parser <unfixed> (bug #1151838)
 	NOTE: https://github.com/expressjs/body-parser/security/advisories/GHSA-27r3-jxmh-p828
 CVE-2026-111100 (The ONVIF device service on the E3 responds to certain informational r ...)
 	NOT-FOR-US: E3
@@ -7554,7 +7554,7 @@ CVE-2026-113353 (LearnPress before 4.4.10 contains a missing authorization vulne
 CVE-2026-113352 (uTox through 0.18.1 contains a path traversal vulnerability that allow ...)
 	TODO: check
 CVE-2026-113351 (libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerabilit ...)
-	- expat <unfixed>
+	- expat <unfixed> (bug #1151840)
 	[trixie] - expat <no-dsa> (Minor issue)
 	[bookworm] - expat <postponed> (Minor issue; can be fixed in next update)
 	NOTE: https://github.com/libexpat/libexpat/pull/1431



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f78ae581997cc2c90f5a5239876b233b2b765cd6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f78ae581997cc2c90f5a5239876b233b2b765cd6
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261023/c4bb81a1/attachment.htm>