[Git][security-tracker-team/security-tracker][master] Add new twisted issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c6e662a8 by Salvatore Bonaccorso at 2026-10-24T12:35:48+02:00
Add new twisted issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -258,7 +258,11 @@ CVE-2026-115885 (The LangGraph CLI is the official command-line interface for La
 CVE-2026-115883 (LangGraph checkpoint savers provide Postgres- and SQLite-backed state  ...)
 	NOT-FOR-US: LangGraph
 CVE-2026-115877 (Twisted is an event-based framework for internet applications, support ...)
-	TODO: check
+	- twisted <unfixed>
+	NOTE: https://github.com/twisted/twisted/security/advisories/GHSA-q7qq-6mhp-9rc4
+	NOTE: https://github.com/twisted/twisted/pull/12755
+	NOTE: Fixed by: https://github.com/twisted/twisted/commit/022b6f7feb5980166c71f54e2c0d8f4f21ff6e1a (twisted-26.10.0rc1)
+	NOTE: Fixed by: https://github.com/twisted/twisted/commit/1616f702d36eda8990a5a5b22ad70fab140a7eb1 (twisted-26.10.0rc1)
 CVE-2026-115863 (ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Rep ...)
 	TODO: check
 CVE-2026-115845 (An incomplete list of disallowed inputs in the Python code validator o ...)
@@ -290,13 +294,27 @@ CVE-2026-115786 (A mailbox quota-accounting vulnerability in Zimbra Collaboratio
 CVE-2026-115785 (An SMTP command injection vulnerability in the data-source testing fun ...)
 	NOT-FOR-US: Zimbra
 CVE-2026-115778 (Twisted is an event-based framework for internet applications, support ...)
-	TODO: check
+	- twisted <unfixed>
+	NOTE: https://github.com/twisted/twisted/security/advisories/GHSA-cwm5-jh59-mwxr
+	NOTE: https://github.com/twisted/twisted/pull/12750
+	NOTE: Fixed by: https://github.com/twisted/twisted/commit/073ba878c6c07d569cb61abc5ae76d46eff1b529 (twisted-26.10.0rc1)
+	NOTE: Fixed by: https://github.com/twisted/twisted/commit/5d91cc66a3591faba758a80a1479e0103602facc (twisted-26.10.0rc1)
 CVE-2026-115776 (Twisted is an event-based framework for internet applications, support ...)
-	TODO: check
+	- twisted <unfixed>
+	NOTE: https://github.com/twisted/twisted/security/advisories/GHSA-53xc-49m8-p798
+	NOTE: https://github.com/twisted/twisted/pull/12771
+	NOTE: Fixed by: https://github.com/twisted/twisted/commit/01f8cff7753c1edac132380b2ea939fa6bdbab30 (twisted-26.10.0rc1)
+	NOTE: Fixed by: https://github.com/twisted/twisted/commit/ac90fb7b0ab73688a581fcd9a7c0577ec8ca3059 (twisted-26.10.0rc1)
 CVE-2026-115775 (Twisted is an event-based framework for internet applications, support ...)
-	TODO: check
+	- twisted <unfixed>
+	NOTE: https://github.com/twisted/twisted/security/advisories/GHSA-3476-c5c2-fr73
+	NOTE: https://github.com/twisted/twisted/pull/12751
+	NOTE: Fixed by: https://github.com/twisted/twisted/commit/8873814bec8288e2466fad4d2c4d64039beb88b0 (twisted-26.10.0rc1)
 CVE-2026-115774 (Twisted is an event-based framework for internet applications, support ...)
-	TODO: check
+	- twisted <unfixed>
+	NOTE: https://github.com/twisted/twisted/security/advisories/GHSA-2qrf-pqgx-qh9v
+	NOTE: https://github.com/twisted/twisted/pull/12764
+	NOTE: Fixed by: https://github.com/twisted/twisted/commit/3d125548bcbe955007cb97f480bb699a5e074741 (twisted-26.10.0rc1)
 CVE-2026-115754 (serialize-javascript from 7.0.1 before 7.1.3 contains a cross-site scr ...)
 	TODO: check
 CVE-2026-115752 (Signal K Server from 2.28.0-beta.2 before 2.34.0 contains a server-sid ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c6e662a8fe5bba2f09f2f0357be1c99ba69a5005

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c6e662a8fe5bba2f09f2f0357be1c99ba69a5005
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261024/6e3b5c8d/attachment-0001.htm>