[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sun Oct 25 19:15:45 GMT 2026 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
bdec1468 by security tracker role at 2026-10-25T19:14:34+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,205 @@
+CVE-2026-116211 (YesWiki 4.5.0 before 4.7.0 contains an SQL injection vulnerability in  ...)
+	TODO: check
+CVE-2026-116208 (YesWiki from 4.6.2 before 4.7.0 contains a missing authorization vulne ...)
+	TODO: check
+CVE-2026-116207 (YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 contai ...)
+	TODO: check
+CVE-2026-116206 (YesWiki from 4.2.0 before 4.7.0 contains a stored cross-site scripting ...)
+	TODO: check
+CVE-2026-116205 (YesWiki before 4.7.0 contains an unauthenticated server-side request f ...)
+	TODO: check
+CVE-2026-116204 (YesWiki before 4.7.0 contains a cross-site request forgery vulnerabili ...)
+	TODO: check
+CVE-2026-116203 (YesWiki before 4.7.0 contains a stored cross-site scripting vulnerabil ...)
+	TODO: check
+CVE-2026-116202 (YesWiki before 4.7.0 contains a stored cross-site scripting vulnerabil ...)
+	TODO: check
+CVE-2026-116201 (Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability t ...)
+	TODO: check
+CVE-2026-116200 (Snipe-IT before 8.6.3 ignores the ldap_start_tls() return value in Lda ...)
+	TODO: check
+CVE-2026-116199 (Snipe-IT before 8.6.3 contains an authentication bypass in GoogleAuthC ...)
+	TODO: check
+CVE-2026-116198 (Snipe-IT before 8.7.0 contains a missing encryption vulnerability in A ...)
+	TODO: check
+CVE-2026-116197 (Edgeless Systems Contrast from 1.21.0 before 1.25.0 contains a non-det ...)
+	TODO: check
+CVE-2026-116196 (Rclone before v1.75.2 contains a credential exposure vulnerability in  ...)
+	TODO: check
+CVE-2026-116195 (Rclone before 1.75.2 contains a path traversal vulnerability in the lo ...)
+	TODO: check
+CVE-2026-116194 (Rclone from 1.52.0 before 1.75.2 contains a cross-site request forgery ...)
+	TODO: check
+CVE-2026-116193 (Rclone from 1.64.0 before 1.75.2 contains an authentication bypass vul ...)
+	TODO: check
+CVE-2026-116192 (rclone from 1.37 before 1.74.2 contains a server-side request forgery  ...)
+	TODO: check
+CVE-2026-116191 (Rclone before 1.75.2 contains a path traversal vulnerability in serve  ...)
+	TODO: check
+CVE-2026-116190 (rclone from v1.56.0 before v1.75.2 contains an information disclosure  ...)
+	TODO: check
+CVE-2026-116189 (rclone from 1.55.0 before 1.75.2 contains a signature verification byp ...)
+	TODO: check
+CVE-2026-116188 (rclone serve s3 versions 1.75.0 before 1.75.2 contain an integer overf ...)
+	TODO: check
+CVE-2026-116187 (Rclone from v1.68.0 before v1.75.2 contains an authorization bypass vu ...)
+	TODO: check
+CVE-2026-116186 (OpenRemote core (openremote-manager) before 1.31.0 does not perform re ...)
+	TODO: check
+CVE-2026-116185 (OpenRemote core before 1.31.0 contains an authorization bypass vulnera ...)
+	TODO: check
+CVE-2026-116184 (OpenRemote before 1.31.0 contains an authorization bypass vulnerabilit ...)
+	TODO: check
+CVE-2026-116183 (phpMyFAQ before 4.1.10 contains an object-level authorization bypass v ...)
+	TODO: check
+CVE-2026-116182 (phpMyFAQ before 4.1.10 contains a server-side request forgery vulnerab ...)
+	TODO: check
+CVE-2026-116181 (vLLM from 0.20.1 before 0.29.0 contains an improper input validation v ...)
+	TODO: check
+CVE-2026-116180 (vLLM from 0.8.5 before 0.31.0 has a denial of service flaw. LogprobsTe ...)
+	TODO: check
+CVE-2026-116179 (vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerab ...)
+	TODO: check
+CVE-2026-116178 (vLLM from 0.20.0 before 0.30.0 contains a denial of service vulnerabil ...)
+	TODO: check
+CVE-2026-116177 (vLLM from 0.10.2 before 0.25.0 contains an uncontrolled resource consu ...)
+	TODO: check
+CVE-2026-116176 (vLLM from 0.9.2 before 0.24.0 contains a server-side request forgery v ...)
+	TODO: check
+CVE-2026-116175 (vLLM from 0.19.0 before 0.24.0 contains a decompression bomb vulnerabi ...)
+	TODO: check
+CVE-2026-116174 (vLLM from 0.22.0 before 0.24.0 contains an improper input validation v ...)
+	TODO: check
+CVE-2026-116173 (vLLM from 0.22.0 before 0.24.0 contains a denial of service vulnerabil ...)
+	TODO: check
+CVE-2026-116172 (vLLM from 0.22.0 before 0.24.0 contains an improper input validation v ...)
+	TODO: check
+CVE-2026-116171 (SiYuan 3.5.4 before 3.8.7 on Windows contains a sensitive-path denylis ...)
+	TODO: check
+CVE-2026-116170 (SiYuan before v3.8.7 contains an sql injection vulnerability that allo ...)
+	TODO: check
+CVE-2026-116169 (SiYuan from 2.10.0 before 3.8.7 contains a stored cross-site scripting ...)
+	TODO: check
+CVE-2026-116168 (SiYuan before 3.8.7 contains a path traversal vulnerability in the MCP ...)
+	TODO: check
+CVE-2026-116167 (SiYuan from 2.9.0 before 3.8.7 contains a cross-site scripting vulnera ...)
+	TODO: check
+CVE-2026-116166 (SiYuan 3.6.0 before 3.8.7 accepts and persists the networkServeTLS set ...)
+	TODO: check
+CVE-2026-116165 (Parse Server before 8.6.101 and 9.0.0 before 9.10.4-alpha.4 contains a ...)
+	TODO: check
+CVE-2026-116164 (Parse Server before 8.6.100 and 9.0.0 before 9.10.4-alpha.3 does not r ...)
+	TODO: check
+CVE-2026-116163 (Parse Server before 8.6.102 and 9.0.0 before 9.10.5-alpha.2 contains a ...)
+	TODO: check
+CVE-2026-116162 (Parse Server before 8.6.104 and 9.0.0 before 9.10.5-alpha.5 saves the  ...)
+	TODO: check
+CVE-2026-116161 (Parse Server before 8.6.103 and 9.0.0 before 9.10.5-alpha.4 contains a ...)
+	TODO: check
+CVE-2026-116160 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a heap-b ...)
+	TODO: check
+CVE-2026-116159 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory ...)
+	TODO: check
+CVE-2026-116158 (ImageMagick before 7.1.2-33 contains a memory leak vulnerability in th ...)
+	TODO: check
+CVE-2026-116157 (ImageMagick before 7.1.2-33 contains a memory leak vulnerability in Pe ...)
+	TODO: check
+CVE-2026-116156 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory ...)
+	TODO: check
+CVE-2026-116155 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory ...)
+	TODO: check
+CVE-2026-116154 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory ...)
+	TODO: check
+CVE-2026-116153 (ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerabil ...)
+	TODO: check
+CVE-2026-116152 (ImageMagick before 7.1.2-33 contains a memory leak vulnerability in th ...)
+	TODO: check
+CVE-2026-116151 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory ...)
+	TODO: check
+CVE-2026-116150 (ImageMagick before 7.1.2-33 contains a memory leak vulnerability in th ...)
+	TODO: check
+CVE-2026-116149 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a stack- ...)
+	TODO: check
+CVE-2026-116148 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains an injec ...)
+	TODO: check
+CVE-2026-116147 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a null p ...)
+	TODO: check
+CVE-2026-116146 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory ...)
+	TODO: check
+CVE-2026-116145 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 contains a securi ...)
+	TODO: check
+CVE-2026-116144 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains uncontro ...)
+	TODO: check
+CVE-2026-116143 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a policy ...)
+	TODO: check
+CVE-2026-116142 (ImageMagick before 7.1.2-33 contains a heap buffer over-read vulnerabi ...)
+	TODO: check
+CVE-2026-116141 (ImageMagick before 7.1.2-33 contains a policy bypass vulnerability in  ...)
+	TODO: check
+CVE-2026-116140 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 incorrectly parse ...)
+	TODO: check
+CVE-2026-116139 (WWBN AVideo 26.0 through 29.3.0 contains a stored cross-site scripting ...)
+	TODO: check
+CVE-2026-116137 (adm-zip through 0.6.1 contains a duplicate-entry validation bypass tha ...)
+	TODO: check
+CVE-2026-116136 (ProjectSend 2.0.0 through 2.7.1 contains an incomplete authorization v ...)
+	TODO: check
+CVE-2026-116073 (Leon before commit 50df142 contains a path traversal vulnerability in  ...)
+	TODO: check
+CVE-2026-116072 (Infinity for Reddit through 8.3.4 contains a login cross-site request  ...)
+	TODO: check
+CVE-2026-116071 (rotki before 1.44.2 contains a weak key derivation vulnerability that  ...)
+	TODO: check
+CVE-2026-116070 (Docker-Proxy through 5.1.9 contains a missing authentication vulnerabi ...)
+	TODO: check
+CVE-2026-116069 (NiubiGEO before 0.3.2 contains an unauthenticated server-side request  ...)
+	TODO: check
+CVE-2026-116068 (Dokploy through 0.30.10 contains an authorization bypass vulnerability ...)
+	TODO: check
+CVE-2026-116067 (Paisa before 0.7.8 contains a path traversal vulnerability in the GetF ...)
+	TODO: check
+CVE-2026-116066 (Firecrawl before 2.11.586 contains a server-side request forgery vulne ...)
+	TODO: check
+CVE-2026-116063 (A weakness has been identified in DedeCMS up to 5.7.118. Impacted is t ...)
+	TODO: check
+CVE-2026-116062 (A security flaw has been discovered in SourceCodester Performance Indi ...)
+	TODO: check
+CVE-2026-116061 (A vulnerability was identified in SourceCodester Performance Indicator ...)
+	TODO: check
+CVE-2026-116060 (A vulnerability was determined in SourceCodester Performance Indicator ...)
+	TODO: check
+CVE-2026-116058 (A vulnerability was found in Alfresco Activiti up to 7.21.0-rc.692. Af ...)
+	TODO: check
+CVE-2026-116057 (A vulnerability has been found in KodCloud KodExplorer up to 4.55. Aff ...)
+	TODO: check
+CVE-2026-116056 (A flaw has been found in KodCloud KodExplorer up to 4.56. Affected is  ...)
+	TODO: check
+CVE-2026-116055 (A vulnerability was detected in SourceCodester Performance Indicator S ...)
+	TODO: check
+CVE-2026-116054 (A security vulnerability has been detected in SH3. This affects an unk ...)
+	TODO: check
+CVE-2026-116053 (A weakness has been identified in dbcli mycli up to 2.29.4/2.30.1. The ...)
+	TODO: check
+CVE-2026-116052 (A security flaw has been discovered in LinkStackOrg LinkStack up to 4. ...)
+	TODO: check
+CVE-2026-116050 (A vulnerability has been found in krupalshah Employee Recruitment Syst ...)
+	TODO: check
+CVE-2026-116049 (A flaw has been found in krupalshah EmployeeRecruitmentSystem up to 92 ...)
+	TODO: check
+CVE-2026-116048 (A vulnerability was detected in krupalshah EmployeeRecruitmentSystem u ...)
+	TODO: check
+CVE-2026-116047 (A vulnerability has been found in Privoce Vocechat up to 0.9.121. This ...)
+	TODO: check
+CVE-2026-115825 (HTTP::Server::PSGI versions before 1.0056 for Perl allow a single requ ...)
+	TODO: check
+CVE-2026-115824 (Starman versions before 0.4019 for Perl allow memory exhaustion via un ...)
+	TODO: check
+CVE-2026-115823 (Starman versions before 0.4019 for Perl send response bodies for HEAD  ...)
+	TODO: check
+CVE-2026-115822 (Starman versions before 0.4019 for Perl allow CPU exhaustion via quadr ...)
+	TODO: check
+CVE-2026-115817 (Starman versions before 0.4019 for Perl allow a stalled request body t ...)
+	TODO: check
 CVE-2026-XXXX [GStreamer-SA-2026-0090]
 	- gstreamer-editing-services1.0 1.28.8-1
 	NOTE: https://gstreamer.freedesktop.org/security/sa-2026-0090.html



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bdec14681436cc5856f0d67a46b85e7ae953693e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bdec14681436cc5856f0d67a46b85e7ae953693e
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261025/28ddc8ca/attachment-0001.htm>

More information about the debian-security-tracker-commits mailing list