[Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Thu Oct 29 19:13:34 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
043ca351 by security tracker role at 2026-10-29T19:13:27+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,841 @@
+CVE-2026-9536 (A heap-based buffer overflow vulnerability exists in the vtkWindBladeR ...)
+ TODO: check
+CVE-2026-9535 (A out-of-bounds read vulnerability exists in the vtkChacoReader InputG ...)
+ TODO: check
+CVE-2026-97860 (YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windo ...)
+ TODO: check
+CVE-2026-97854 (Yamaha wireless LAN router NWR100 provided by Yamaha Corporation conta ...)
+ TODO: check
+CVE-2026-97073 (Missing Authorization vulnerability in myCred myCred mycred allows Exp ...)
+ TODO: check
+CVE-2026-96767 (The NEX-Forms \u2013 Ultimate Forms Plugin for WordPress plugin for Wo ...)
+ TODO: check
+CVE-2026-96203 (Use after free in Microsoft Edge (Chromium-based) allows an unauthoriz ...)
+ TODO: check
+CVE-2026-96199 (Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows a ...)
+ TODO: check
+CVE-2026-96198 (Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows a ...)
+ TODO: check
+CVE-2026-96196 (Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based ...)
+ TODO: check
+CVE-2026-96192 (Use after free in Microsoft Edge for iOS allows an unauthorized attack ...)
+ TODO: check
+CVE-2026-96187 (Access of resource using incompatible type ('type confusion') in Micro ...)
+ TODO: check
+CVE-2026-93680 (IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to ...)
+ TODO: check
+CVE-2026-93571 (Szafir is vulnerable to Path Traversal in the uploaded filename. A man ...)
+ TODO: check
+CVE-2026-93570 (Szafir and Szafir Weryfikuj\u0105ca are vulnerable to XML External Ent ...)
+ TODO: check
+CVE-2026-93011 (A flaw was found in dnsmasq. After a reduction of internal domain-name ...)
+ TODO: check
+CVE-2026-93010 (A flaw was found in dnsmasq. When DHCP leasequery is enabled without l ...)
+ TODO: check
+CVE-2026-93009 (A flaw was found in dnsmasq. The DHCPv6 client hostname parser can rea ...)
+ TODO: check
+CVE-2026-93008 (A flaw was found in dnsmasq. When following a CNAME in a DNS response, ...)
+ TODO: check
+CVE-2026-93007 (A flaw was found in dnsmasq. The TCP DNS service uses a small fixed po ...)
+ TODO: check
+CVE-2026-93006 (A flaw was found in dnsmasq. The TFTP server can serve the wrong file ...)
+ TODO: check
+CVE-2026-92086 (The MW WP Form plugin for WordPress is vulnerable to Sensitive Informa ...)
+ TODO: check
+CVE-2026-91153 (The Everest Forms \u2013 Contact Form, Payment Form, Quiz, Survey & Cu ...)
+ TODO: check
+CVE-2026-91152 (The Everest Forms \u2013 Contact Form, Payment Form, Quiz, Survey & Cu ...)
+ TODO: check
+CVE-2026-90991 (IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticat ...)
+ TODO: check
+CVE-2026-90872 (Improper neutralization of directives in dynamically evaluated code in ...)
+ TODO: check
+CVE-2026-90871 (Improper limitation of a pathname to a restricted directory in Progres ...)
+ TODO: check
+CVE-2026-90870 (A missing release of backend receiver sessions in the Ad Hoc Transfer ...)
+ TODO: check
+CVE-2026-90869 (A remote attacker who knows a valid account's enrolled SSH public key ...)
+ TODO: check
+CVE-2026-90868 (An OS command injection vulnerability in Progress Software WS_FTP Serv ...)
+ TODO: check
+CVE-2026-90867 (Improper access control in the Web Admin console of Progress Software ...)
+ TODO: check
+CVE-2026-90866 (A path traversal vulnerability in Progress Software WS_FTP Server vers ...)
+ TODO: check
+CVE-2026-90865 (An OS command injection vulnerability in Progress Software WS_FTP Serv ...)
+ TODO: check
+CVE-2026-90864 (A path traversal vulnerability in Progress Software WS_FTP Server vers ...)
+ TODO: check
+CVE-2026-90863 (Missing authorization in the administrative interface of Progress Soft ...)
+ TODO: check
+CVE-2026-90862 (Improper authentication in the Web Transfer Module of Progress Softwar ...)
+ TODO: check
+CVE-2026-90861 (Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0. ...)
+ TODO: check
+CVE-2026-8824 (A memory corruption vulnerability exists in the vtkBMPReader ExecuteDa ...)
+ TODO: check
+CVE-2026-8822 (A memory corruption vulnerability exists in the vtkDEMReader ReadProfi ...)
+ TODO: check
+CVE-2026-88941 (Kaspersky has fixed a vulnerability in the Network Agent for Windows m ...)
+ TODO: check
+CVE-2026-88090 (Access of resource using incompatible type ('type confusion') in Micro ...)
+ TODO: check
+CVE-2026-88078 (Improper verification of cryptographic signature in Microsoft Edge (Ch ...)
+ TODO: check
+CVE-2026-88077 (Integer overflow or wraparound in Microsoft Edge (Chromium-based) allo ...)
+ TODO: check
+CVE-2026-85899 (Use after free in Microsoft Edge (Chromium-based) allows an authorized ...)
+ TODO: check
+CVE-2026-85897 (Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows a ...)
+ TODO: check
+CVE-2026-85890 (Double free in Microsoft Edge (Chromium-based) allows an unauthorized ...)
+ TODO: check
+CVE-2026-85330 (Incorrect authorization in Microsoft Edge for Android allows an unauth ...)
+ TODO: check
+CVE-2026-84296 (Multi-Factor Authentication Bypass vulnerability in SSH component in P ...)
+ TODO: check
+CVE-2026-84295 (Improper authentication in Progress Software WS_FTP Server versions pr ...)
+ TODO: check
+CVE-2026-84294 (Improper limitation of pathname in the Ad Hoc Transfer component of Pr ...)
+ TODO: check
+CVE-2026-80069 (MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing ...)
+ TODO: check
+CVE-2026-80067 (MasterStudy LMS plugin for WordPress before 3.7.50 contains a path tra ...)
+ TODO: check
+CVE-2026-7190 (A cross-site scripting (XSS) vulnerability in the ICTBroadcast softwar ...)
+ TODO: check
+CVE-2026-79589 (The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an in ...)
+ TODO: check
+CVE-2026-77819 (IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticat ...)
+ TODO: check
+CVE-2026-77817 (IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticat ...)
+ TODO: check
+CVE-2026-71569 (Server-Side Request Forgery (SSRF) vulnerability in Apache Camel A2A c ...)
+ TODO: check
+CVE-2026-6877 (ServiceNow has addressed a domain separation bypass security issue tha ...)
+ TODO: check
+CVE-2026-66912 (Zimbra is vulnerable to Stored Cross-Site Scripting (XSS) via the From ...)
+ TODO: check
+CVE-2026-66911 (Zimbra is vulnerable to stored cross-site scripting (XSS) via the Cont ...)
+ TODO: check
+CVE-2026-62374 (SD JWT JS is a JavaScript implementation of the Selective Disclosure J ...)
+ TODO: check
+CVE-2026-62131 (Unauthenticated PHP Object Injection in Zoho Flow <= 2.14.5 versions.)
+ TODO: check
+CVE-2026-62018 (Unauthenticated PHP Object Injection in Gunslinger <= 1.11 versions.)
+ TODO: check
+CVE-2026-62017 (Unauthenticated PHP Object Injection in Good Homes <= 1.3.13 versions.)
+ TODO: check
+CVE-2026-62016 (Unauthenticated PHP Object Injection in Gamic <= 1.19 versions.)
+ TODO: check
+CVE-2026-62015 (Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions.)
+ TODO: check
+CVE-2026-62014 (Unauthenticated PHP Object Injection in EmojiNation <= 1.0.12 versions ...)
+ TODO: check
+CVE-2026-62013 (Unauthenticated PHP Object Injection in Edge Decor <= 2.9 versions.)
+ TODO: check
+CVE-2026-62012 (Unauthenticated PHP Object Injection in Coinpress <= 1.0.15 versions.)
+ TODO: check
+CVE-2026-62011 (Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions.)
+ TODO: check
+CVE-2026-62010 (Unauthenticated PHP Object Injection in Avventure <= 1.1.12 versions.)
+ TODO: check
+CVE-2026-62009 (Unauthenticated PHP Object Injection in Filmax <= 1.1.11 versions.)
+ TODO: check
+CVE-2026-62008 (Unauthenticated PHP Object Injection in Orpheus <= 1.8 versions.)
+ TODO: check
+CVE-2026-62006 (Unauthenticated PHP Object Injection in Nuts <= 1.12 versions.)
+ TODO: check
+CVE-2026-62005 (Unauthenticated PHP Object Injection in Muzicon <= 1.15 versions.)
+ TODO: check
+CVE-2026-62004 (Unauthenticated PHP Object Injection in Motorix <= 1.11 versions.)
+ TODO: check
+CVE-2026-62003 (Unauthenticated PHP Object Injection in Mission <= 1.22 versions.)
+ TODO: check
+CVE-2026-62002 (Unauthenticated PHP Object Injection in Meals & Wheels <= 1.1.13 versi ...)
+ TODO: check
+CVE-2026-62001 (Unauthenticated PHP Object Injection in Marcell <= 1.2.14 versions.)
+ TODO: check
+CVE-2026-61998 (Unauthenticated PHP Object Injection in Le Truffe <= 1.1.7 versions.)
+ TODO: check
+CVE-2026-61997 (Unauthenticated PHP Object Injection in Legal Stone <= 1.2.11 versions ...)
+ TODO: check
+CVE-2026-61996 (Subscriber SQL Injection in MLS On The Fly <= 1.8.1.5 versions.)
+ TODO: check
+CVE-2026-61995 (Unauthenticated Cross Site Scripting (XSS) in YouTube Showcase <= 4.1. ...)
+ TODO: check
+CVE-2026-61993 (Unauthenticated Cross Site Scripting (XSS) in Blockonomics 3.11.0 vers ...)
+ TODO: check
+CVE-2026-61992 (Unauthenticated PHP Object Injection in GEO my WordPress <= 4.5.5.3 ve ...)
+ TODO: check
+CVE-2026-61991 (Unauthenticated Remote Code Execution (RCE) in AjaxLoadMore Cache <= 3 ...)
+ TODO: check
+CVE-2026-61989 (Unauthenticated Cross Site Scripting (XSS) in Easy Property Listings < ...)
+ TODO: check
+CVE-2026-61988 (Unauthenticated Cross Site Scripting (XSS) in Auction Nudge \u2013 You ...)
+ TODO: check
+CVE-2026-60111
+ REJECTED
+CVE-2026-5702 (Cross-Site Request Forgery (CSRF) vulnerability in SABBATIC applicatio ...)
+ TODO: check
+CVE-2026-5700 (Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC applicatio ...)
+ TODO: check
+CVE-2026-5699 (Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC applicatio ...)
+ TODO: check
+CVE-2026-5698 (Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC applicatio ...)
+ TODO: check
+CVE-2026-5697 (Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC applicatio ...)
+ TODO: check
+CVE-2026-58120
+ REJECTED
+CVE-2026-58119
+ REJECTED
+CVE-2026-58118
+ REJECTED
+CVE-2026-56056 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-54871 (Missing Authorization vulnerability in Mamunur Rashid ShopBuilder \u20 ...)
+ TODO: check
+CVE-2026-54866 (Unauthenticated Cross Site Scripting (XSS) in Razorpay Payment Button ...)
+ TODO: check
+CVE-2026-54865 (Subscriber Cross Site Scripting (XSS) in Podamibe Custom User Gravatar ...)
+ TODO: check
+CVE-2026-54864 (Unauthenticated Cross Site Scripting (XSS) in Post Video Players <= 1. ...)
+ TODO: check
+CVE-2026-54862 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-54860 (Unauthenticated PHP Object Injection in Ozisti <= 1.1.10 versions.)
+ TODO: check
+CVE-2026-54859 (Unauthenticated PHP Object Injection in Preservation <= 1.15 versions.)
+ TODO: check
+CVE-2026-54858 (Unauthenticated PHP Object Injection in Printy <= 1.13.0 versions.)
+ TODO: check
+CVE-2026-54857 (Unauthenticated PHP Object Injection in Quirky <= 1.23 versions.)
+ TODO: check
+CVE-2026-54856 (Unauthenticated PHP Object Injection in RexCoin <= 1.2.6 versions.)
+ TODO: check
+CVE-2026-54853 (Missing Authorization vulnerability in Cozmoslabs Profile Builder prof ...)
+ TODO: check
+CVE-2026-54852 (Missing Authorization vulnerability in miniOrange Page Restriction Wor ...)
+ TODO: check
+CVE-2026-52709 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-52708 (Missing Authorization vulnerability in weDevs WP User Frontend wp-user ...)
+ TODO: check
+CVE-2026-51912 (OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in ma ...)
+ TODO: check
+CVE-2026-51905 (TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access ...)
+ TODO: check
+CVE-2026-51903 (SuperAGI v0.0.14 contains an improper access control vulnerability in ...)
+ TODO: check
+CVE-2026-51902 (SuperAGI up to v0.0.14 contains an improper access control vulnerabili ...)
+ TODO: check
+CVE-2026-51863 (DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_fi ...)
+ TODO: check
+CVE-2026-51851 (modelscope agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directo ...)
+ TODO: check
+CVE-2026-49142 (OpenEMR before 8.5.0 contains an authenticated SQL injection vulnerabi ...)
+ TODO: check
+CVE-2026-48884 (Missing Authorization vulnerability in weDevs WP User Frontend wp-user ...)
+ TODO: check
+CVE-2026-48202 (Improper Neutralization of Script-Related HTML Tags in a Web Page (Bas ...)
+ TODO: check
+CVE-2026-48200 (Insertion of Sensitive Information Into Sent Data vulnerability in Bar ...)
+ TODO: check
+CVE-2026-48196 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-48195 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-42707 (Missing Authorization vulnerability in HivePress HivePress Claim Listi ...)
+ TODO: check
+CVE-2026-42703 (Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms ...)
+ TODO: check
+CVE-2026-42701 (Shop manager PHP Object Injection in YayMail <= 4.4.6 versions.)
+ TODO: check
+CVE-2026-42694 (Improper Neutralization of Script-Related HTML Tags in a Web Page (Bas ...)
+ TODO: check
+CVE-2026-42692 (Unauthenticated Cross Site Scripting (XSS) in WP Crowdfunding <= 2.2.2 ...)
+ TODO: check
+CVE-2026-42691 (Authorization Bypass Through User-Controlled Key vulnerability in Even ...)
+ TODO: check
+CVE-2026-42690 (Subscriber Broken Access Control in LearnPress <= 4.4.10 versions.)
+ TODO: check
+CVE-2026-42057 (An invalid pointer dereference vulnerability exists in the vtkPNGReade ...)
+ TODO: check
+CVE-2026-41216 (An invalid pointer dereference vulnerability exists in the vtkPNGReade ...)
+ TODO: check
+CVE-2026-39782 (Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms ...)
+ TODO: check
+CVE-2026-39742 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-39741 (Missing Authorization vulnerability in RelyWP Simple Cloudflare Turnst ...)
+ TODO: check
+CVE-2026-39737 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-39736 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+ TODO: check
+CVE-2026-39735 (Missing Authorization vulnerability in Crocoblock JetEngine jet-engine ...)
+ TODO: check
+CVE-2026-33924 (Two OS command injection vulnerabilities were discovered in the update ...)
+ TODO: check
+CVE-2026-33923 (A signature verification vulnerability was discovered in the update in ...)
+ TODO: check
+CVE-2026-27401 (Missing Authorization vulnerability in YITH YITH PayPal Express Checko ...)
+ TODO: check
+CVE-2026-27394 (Unauthenticated Cross Site Scripting (XSS) in Eventer <= 0.1.1 version ...)
+ TODO: check
+CVE-2026-27063 (Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) c ...)
+ TODO: check
+CVE-2026-27062 (Cross-Site Request Forgery (CSRF) vulnerability in WPFunnels Team WPFu ...)
+ TODO: check
+CVE-2026-25467 (Improper Neutralization of Script-Related HTML Tags in a Web Page (Bas ...)
+ TODO: check
+CVE-2026-25450 (Missing Authorization vulnerability in ThemeGrill User Registration us ...)
+ TODO: check
+CVE-2026-25448 (Missing Authorization vulnerability in weDevs WP ERP erp allows Exploi ...)
+ TODO: check
+CVE-2026-24533 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-22386 (Missing Authorization vulnerability in Ahmad WP Job Portal wp-job-port ...)
+ TODO: check
+CVE-2026-20942 (Improper restriction of rendered ui layers or frames in Microsoft Edge ...)
+ TODO: check
+CVE-2026-18894 (IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to ...)
+ TODO: check
+CVE-2026-11587 (SQL injection allowing an authenticated user with access to ACL manage ...)
+ TODO: check
+CVE-2026-119251 (A malicious actor with local access and high privileges could exploit ...)
+ TODO: check
+CVE-2026-119250 (A malicious actor with local access and low privileges could exploit a ...)
+ TODO: check
+CVE-2026-119249 (A malicious actor with access to the network could exploit a Binding t ...)
+ TODO: check
+CVE-2026-119168 (HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink followi ...)
+ TODO: check
+CVE-2026-119145 (Frappe before 15.121.0 and 16.x before 16.34.0 contains a path travers ...)
+ TODO: check
+CVE-2026-119144 (Frappe Framework before 15.111.0 and 16.x before 16.21.0 contains a se ...)
+ TODO: check
+CVE-2026-119143 (Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a deni ...)
+ TODO: check
+CVE-2026-119142 (Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a deni ...)
+ TODO: check
+CVE-2026-119141 (Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a deni ...)
+ TODO: check
+CVE-2026-119140 (Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a deni ...)
+ TODO: check
+CVE-2026-119139 (Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a left ...)
+ TODO: check
+CVE-2026-119138 (Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a deni ...)
+ TODO: check
+CVE-2026-119137 (Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a stac ...)
+ TODO: check
+CVE-2026-119136 (Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains insuff ...)
+ TODO: check
+CVE-2026-119135 (Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 panics when the ...)
+ TODO: check
+CVE-2026-119134 (Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0. ...)
+ TODO: check
+CVE-2026-119133 (Wasmtime 47.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a memo ...)
+ TODO: check
+CVE-2026-119132 (Wasmtime from 49.0.0 before 49.0.3 contains a denial-of-service vulner ...)
+ TODO: check
+CVE-2026-119131 (Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a deni ...)
+ TODO: check
+CVE-2026-119130 (Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0. ...)
+ TODO: check
+CVE-2026-119129 (ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.19.5 contains a missin ...)
+ TODO: check
+CVE-2026-119128 (ZITADEL 4.0.0 before 4.19.5 contains an authentication bypass vulnerab ...)
+ TODO: check
+CVE-2026-119127 (ZITADEL 4.0.0 before 4.19.5 contains a host header injection vulnerabi ...)
+ TODO: check
+CVE-2026-119126 (Parse Server before 8.6.106 and 9.0.0 before 9.10.5-alpha.7 mishandles ...)
+ TODO: check
+CVE-2026-119125 (Parse Server before 8.6.107 and 9.0.0 before 9.10.5-alpha.8 returns th ...)
+ TODO: check
+CVE-2026-119124 (ImageMagick before 7.1.2-34 contains a heap-based buffer overflow in i ...)
+ TODO: check
+CVE-2026-119123 (ImageMagick before 7.1.2-34 contains a stack overflow vulnerability in ...)
+ TODO: check
+CVE-2026-119122 (Crawl4AI before 0.9.5 contains a blind server-side request forgery vul ...)
+ TODO: check
+CVE-2026-119121 (Crawl4AI from 0.9.0 before 0.9.5 contains a JavaScript injection vulne ...)
+ TODO: check
+CVE-2026-119120 (Crawl4AI from 0.9.0 before 0.9.5 fails to filter the CosineStrategy mo ...)
+ TODO: check
+CVE-2026-119119 (Crawl4AI before 0.9.5 contains a denial of service vulnerability in th ...)
+ TODO: check
+CVE-2026-119118 (Crawl4AI before 0.9.5 contains an improper certificate validation vuln ...)
+ TODO: check
+CVE-2026-119115 (Incorrect authorization in the issuer resolution logic in AWS Private ...)
+ TODO: check
+CVE-2026-119054 (Multiple Pages Generator by Themeisle before 4.2.5 contains a stored c ...)
+ TODO: check
+CVE-2026-119053 (lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of- ...)
+ TODO: check
+CVE-2026-119052 (llama.cpp b2877 before b11935 contains an uncaught exception vulnerabi ...)
+ TODO: check
+CVE-2026-119051 (flat through 6.0.1 contains an uncontrolled resource allocation vulner ...)
+ TODO: check
+CVE-2026-119050 (Agno through 3.1.11 contains an unsafe reflection vulnerability in Pan ...)
+ TODO: check
+CVE-2026-119049 (FreeMail before 5.3.2 contains an authorization bypass vulnerability t ...)
+ TODO: check
+CVE-2026-119048 (JeeSite 5.11.0 through 5.19.1 contains an insecure direct object refer ...)
+ TODO: check
+CVE-2026-119028 (oapi-codegen 2.0.0 before 2.8.1 contains a code injection vulnerabilit ...)
+ TODO: check
+CVE-2026-119027 (oapi-codegen 2.5.0 before 2.8.1 contains a code injection vulnerabilit ...)
+ TODO: check
+CVE-2026-119025 (open 7.2.0 before 11.0.0 contains an OS command injection vulnerabilit ...)
+ TODO: check
+CVE-2026-118989 (WebToffee Product Import Export for WooCommerce 2.5.1 before 2.6.8 con ...)
+ TODO: check
+CVE-2026-118984 (OmniRoute 3.8.0 before 3.8.52 contains an unverified password change v ...)
+ TODO: check
+CVE-2026-118782 (Forge (also called node-forge) is a native implementation of Transport ...)
+ TODO: check
+CVE-2026-118781 (Forge (also called node-forge) is a native implementation of Transport ...)
+ TODO: check
+CVE-2026-118780 (Forge (also called node-forge) is a native implementation of Transport ...)
+ TODO: check
+CVE-2026-118779 (Forge (also called node-forge) is a native implementation of Transport ...)
+ TODO: check
+CVE-2026-118778 (Forge (also called node-forge) is a native implementation of Transport ...)
+ TODO: check
+CVE-2026-118777 (Forge (also called node-forge) is a native implementation of Transport ...)
+ TODO: check
+CVE-2026-118776 (Forge (also called node-forge) is a native implementation of Transport ...)
+ TODO: check
+CVE-2026-118775 (Forge (also called node-forge) is a native implementation of Transport ...)
+ TODO: check
+CVE-2026-118774 (Forge (also called node-forge) is a native implementation of Transport ...)
+ TODO: check
+CVE-2026-118773 (Glob matches files using patterns the shell uses. From 9.0.0 until 14. ...)
+ TODO: check
+CVE-2026-118772 (joi is a schema description language and data validator for JavaScript ...)
+ TODO: check
+CVE-2026-118769 (Botan is a C++ cryptography library. From 2.1.0 until 3.13.0, the Bota ...)
+ TODO: check
+CVE-2026-118768 (Botan is a C++ cryptography library. From 1.11.34 until 3.13.0, the bo ...)
+ TODO: check
+CVE-2026-118767 (Botan is a C++ cryptography library. From 1.11.22 until 3.13.0, Botan' ...)
+ TODO: check
+CVE-2026-118766 (Botan is a C++ cryptography library. Prior to 3.13.0, Botan's online O ...)
+ TODO: check
+CVE-2026-118765 (Botan is a C++ cryptography library. From 3.7.0 until 3.13.0, an appli ...)
+ TODO: check
+CVE-2026-118764 (minimatch is a minimal matching utility for converting glob expression ...)
+ TODO: check
+CVE-2026-118763 (sigstore-js provides JavaScript libraries for interacting with Sigstor ...)
+ TODO: check
+CVE-2026-118762 (Monkeytype is a minimalistic and customizable typing test. Prior to 26 ...)
+ TODO: check
+CVE-2026-118761 (Kubeflow Pipelines enables users to build and deploy portable, scalabl ...)
+ TODO: check
+CVE-2026-118760 (Kubeflow Pipelines enables users to build and deploy portable, scalabl ...)
+ TODO: check
+CVE-2026-118759 (Kubeflow Pipelines enables users to build and deploy portable, scalabl ...)
+ TODO: check
+CVE-2026-118758 (Kubeflow Pipelines enables users to build and deploy portable, scalabl ...)
+ TODO: check
+CVE-2026-118673 (KeePassXC is a cross-platform community-driven port of the Windows app ...)
+ TODO: check
+CVE-2026-118425 (A flaw was found in the secure-redirect-uris-enforcer client policy of ...)
+ TODO: check
+CVE-2026-118192 (The JoomSport \u2013 for Sports: Team & League, Football, Hockey & mor ...)
+ TODO: check
+CVE-2026-118097 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-118095 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-118094 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-118093 (Missing Authorization vulnerability in WPFunnels Team Product Feed Man ...)
+ TODO: check
+CVE-2026-118092 (Missing Authorization vulnerability in StylemixThemes MasterStudy LMS ...)
+ TODO: check
+CVE-2026-118091 (Missing Authorization vulnerability in WPFunnels Team WPFunnels wpfunn ...)
+ TODO: check
+CVE-2026-118088 (Missing Authorization vulnerability in WPFunnels Team WPFunnels wpfunn ...)
+ TODO: check
+CVE-2026-118087 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-118085 (Unauthenticated Cross Site Scripting (XSS) in GlobalPayments WooCommer ...)
+ TODO: check
+CVE-2026-118084 (Subscriber Insecure Direct Object References (IDOR) in Hotel Booking < ...)
+ TODO: check
+CVE-2026-118083 (Unauthenticated Sensitive Data Exposure in WP Crowdfunding <= 2.2.2 ve ...)
+ TODO: check
+CVE-2026-118082 (Subscriber Privilege Escalation in Buddyboss Platform <= 3.5.0 version ...)
+ TODO: check
+CVE-2026-118081 (Contributor PHP Object Injection in 10Web Social Photo Feed <= 1.5.6 v ...)
+ TODO: check
+CVE-2026-118080 (Contributor PHP Object Injection in Social Snap <= 1.5.4 versions.)
+ TODO: check
+CVE-2026-118079 (Shop manager PHP Object Injection in FV Flowplayer Video Player <= 8.3 ...)
+ TODO: check
+CVE-2026-118078 (Shop manager PHP Object Injection in Product Catalog Feed by PixelYour ...)
+ TODO: check
+CVE-2026-118077 (Author PHP Object Injection in Sastra Essential Addons for Elementor < ...)
+ TODO: check
+CVE-2026-118076 (Contributor PHP Object Injection in Frisbii Pay <= 1.8.19 versions.)
+ TODO: check
+CVE-2026-118075 (Contributor PHP Object Injection in WP Media folders <= 1.1.10 version ...)
+ TODO: check
+CVE-2026-118074 (Shop manager PHP Object Injection in Finale Lite <= 2.21.0 versions.)
+ TODO: check
+CVE-2026-118073 (Subscriber PHP Object Injection in News Kit Elementor Addons <= 1.5.0 ...)
+ TODO: check
+CVE-2026-117611 (Improper certificate validation in Checkmk <2.5.0p18, <2.4.0p39, <2.3. ...)
+ TODO: check
+CVE-2026-117174
+ REJECTED
+CVE-2026-116869 (Shop manager PHP Object Injection in myPOS Checkout <= 1.4.5 versions.)
+ TODO: check
+CVE-2026-116868 (Subscriber PHP Object Injection in BuddyPress Xprofile Custom Field Ty ...)
+ TODO: check
+CVE-2026-116867 (Contributor PHP Object Injection in Dynamic QR Code – generator ...)
+ TODO: check
+CVE-2026-116866 (Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce ...)
+ TODO: check
+CVE-2026-116865 (Editor PHP Object Injection in Zippy <= 1.7.0 versions.)
+ TODO: check
+CVE-2026-116864 (Author PHP Object Injection in WPCargo Track & Trace <= 8.0.5 versions ...)
+ TODO: check
+CVE-2026-116857 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-116856 (Missing Authorization vulnerability in WP Desk Flexible Quantity \u201 ...)
+ TODO: check
+CVE-2026-116850 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-116849 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-116848 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-116846 (Missing Authorization vulnerability in WP User Manager WP User Manager ...)
+ TODO: check
+CVE-2026-116763 (The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross ...)
+ TODO: check
+CVE-2026-116566 (socket.getaddrinfo() previously accepted null bytes within *host* and ...)
+ TODO: check
+CVE-2026-116409 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-116406 (Missing Authorization vulnerability in Webba Plugins Webba Booking web ...)
+ TODO: check
+CVE-2026-116402 (Improper Neutralization of Script-Related HTML Tags in a Web Page (Bas ...)
+ TODO: check
+CVE-2026-116399 (Cross-Site Request Forgery (CSRF) vulnerability in InstaWP InstaWP Con ...)
+ TODO: check
+CVE-2026-116387 (Missing Authorization vulnerability in Brainstorm Force SureForms sure ...)
+ TODO: check
+CVE-2026-115967 (Weak Authentication vulnerability in Hamid Alinia Login with phone num ...)
+ TODO: check
+CVE-2026-115965 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+ TODO: check
+CVE-2026-115964 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+ TODO: check
+CVE-2026-115963 (Missing Authorization vulnerability in VideoWhisper.com Broadcast Live ...)
+ TODO: check
+CVE-2026-115962 (Authentication Bypass by Spoofing vulnerability in myCred myCred mycre ...)
+ TODO: check
+CVE-2026-115821 (The NewsmanApp plugin for WordPress is vulnerable to Stored Cross-Site ...)
+ TODO: check
+CVE-2026-115805 (Improper handling of local filesystem paths in Rapid7 Insight Agent on ...)
+ TODO: check
+CVE-2026-115795 (P-Net before 1.0.3 does not check that a complete block header is pres ...)
+ TODO: check
+CVE-2026-115794 (P-Net before 1.0.3 passes the application alarm callback a data length ...)
+ TODO: check
+CVE-2026-115793 (P-Net before 1.0.3 does not release the RPC session allocated for an R ...)
+ TODO: check
+CVE-2026-115713 (Improper Link Resolution Before File Access ('Link Following') (CWE-59 ...)
+ TODO: check
+CVE-2026-115712 (Incorrect Authorization (CWE-863) in Elastic Cloud Enterprise (ECE) ca ...)
+ TODO: check
+CVE-2026-115711 (Insertion of Sensitive Information into Externally-Accessible File or ...)
+ TODO: check
+CVE-2026-115709 (Improper Link Resolution Before File Access ('Link Following') (CWE-59 ...)
+ TODO: check
+CVE-2026-115708 (Improper Link Resolution Before File Access ('Link Following') (CWE-59 ...)
+ TODO: check
+CVE-2026-115707 (Insertion of Sensitive Information into Externally-Accessible File or ...)
+ TODO: check
+CVE-2026-115706 (Authorization Bypass Through User-Controlled Key (CWE-639) in Elastic ...)
+ TODO: check
+CVE-2026-115611 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-115610 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-115605 (Missing Authorization vulnerability in Brainstorm Force SureDash sured ...)
+ TODO: check
+CVE-2026-115601 (Missing Authorization vulnerability in WP Desk Custom Price for WooCom ...)
+ TODO: check
+CVE-2026-115599 (Missing Authorization vulnerability in ThimPress LearnPress learnpress ...)
+ TODO: check
+CVE-2026-115592 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-115303 (The Contact Form by Supsystic WordPress plugin before 1.11.1 does not ...)
+ TODO: check
+CVE-2026-114706 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-114358 (This vulnerability exists in the Radius Xenia M2M Platform due to insu ...)
+ TODO: check
+CVE-2026-114193 (Missing Authorization vulnerability in Eyal Fitoussi GEO my WordPress ...)
+ TODO: check
+CVE-2026-114181 (Missing Authorization vulnerability in Magepeople inc. Taxi Booking Ma ...)
+ TODO: check
+CVE-2026-114148 (Incorrect default permissions in ASP.NET Core allows an authorized att ...)
+ TODO: check
+CVE-2026-113697 (Reflected cross-site scripting in the agent query feature of BMC Helix ...)
+ TODO: check
+CVE-2026-113696 (Improper authorization in the SmartIT change approval feature of BMC I ...)
+ TODO: check
+CVE-2026-113695 (Reflected cross-site scripting in the SmartIT inline-image attachment ...)
+ TODO: check
+CVE-2026-113694 (Improper authorization in the SmartIT user attachment feature of BMC I ...)
+ TODO: check
+CVE-2026-113693 (Exposure of sensitive information in the SmartIT system-account settin ...)
+ TODO: check
+CVE-2026-113692 (Path traversal in the SmartIT file-management feature of BMC IT Servic ...)
+ TODO: check
+CVE-2026-113691 (Stored cross-site scripting in the SmartIT knowledge-article feature o ...)
+ TODO: check
+CVE-2026-113690 (Stored cross-site scripting in the SmartIT attachment feature of BMC I ...)
+ TODO: check
+CVE-2026-113689 (Stored cross-site scripting in the SmartIT work-notes feature of BMC I ...)
+ TODO: check
+CVE-2026-113688 (Server-side request forgery in the SmartIT URL-based attachment featur ...)
+ TODO: check
+CVE-2026-113576 (Adobe Digital Editions is affected by an Improper Limitation of a Path ...)
+ TODO: check
+CVE-2026-112827 (Missing Authorization vulnerability in VillaTheme HANDMADE \u2013 Drop ...)
+ TODO: check
+CVE-2026-112256 (Acceptance of extraneous untrusted data with trusted data vulnerabilit ...)
+ TODO: check
+CVE-2026-112255 (Initialization of a resource with an insecure default vulnerability in ...)
+ TODO: check
+CVE-2026-112200 (P-Net before 1.0.3 does not release the Application Relationship (AR) ...)
+ TODO: check
+CVE-2026-111736 (P-Net before 1.0.3 dereferences a NULL AR pointer in pf_fspm_cm_read_i ...)
+ TODO: check
+CVE-2026-111735 (P-Net before 1.0.3 contains an integer underflow in pf_cpm_c_data_ind( ...)
+ TODO: check
+CVE-2026-111734 (P-Net before 1.0.3 does not validate the length of a received Ethernet ...)
+ TODO: check
+CVE-2026-111733 (P-Net before 1.0.3 dereferences a NULL AR pointer when handling an imp ...)
+ TODO: check
+CVE-2026-111732 (P-Net before 1.0.3, when built with PNET_OPTION_AR_VENDOR_BLOCKS enabl ...)
+ TODO: check
+CVE-2026-111731 (P-Net before 1.0.3 enters an infinite loop when handling a read reques ...)
+ TODO: check
+CVE-2026-111730 (P-Net before 1.0.3 does not validate the LengthPeerStationName field o ...)
+ TODO: check
+CVE-2026-111419 (A sensitive information exposure vulnerability exists on the Foxit off ...)
+ TODO: check
+CVE-2026-111418 (A server-side request forgery (SSRF) vulnerability exists in the Foxit ...)
+ TODO: check
+CVE-2026-111417 (A broken access control vulnerability exists in the Foxit official web ...)
+ TODO: check
+CVE-2026-111318 (The HT Mega Addons for Elementor \u2013 Elementor Widgets & Template B ...)
+ TODO: check
+CVE-2026-110881 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-110707 (The RSS Aggregator by Feedzy \u2013 Feed to Post, Autoblogging, News & ...)
+ TODO: check
+CVE-2026-110309 (IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticat ...)
+ TODO: check
+CVE-2026-110245 (IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to ...)
+ TODO: check
+CVE-2026-110244 (IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticat ...)
+ TODO: check
+CVE-2026-110200 (IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticat ...)
+ TODO: check
+CVE-2026-110196 (IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker wi ...)
+ TODO: check
+CVE-2026-110193 (IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker wi ...)
+ TODO: check
+CVE-2026-110192 (IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote authenticat ...)
+ TODO: check
+CVE-2026-110190 (IBM Langflow OSS 1.0.0 through 1.12.4 could allow an authenticated use ...)
+ TODO: check
+CVE-2026-110186 (IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to ...)
+ TODO: check
+CVE-2026-110184 (The Newsmatic theme for WordPress is vulnerable to blind SQL Injection ...)
+ TODO: check
+CVE-2026-109891 (Missing Authorization vulnerability in weDevs Happy Addons for Element ...)
+ TODO: check
+CVE-2026-109822 (Yamaha wireless LAN router NWR100 provided by Yamaha Corporation conta ...)
+ TODO: check
+CVE-2026-109216 (The Meta Box \u2013 A Framework for Dynamic Websites plugin for WordPr ...)
+ TODO: check
+CVE-2026-109215 (The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross ...)
+ TODO: check
+CVE-2026-108494 (Unauthenticated Cross Site Scripting (XSS) in Chained Quiz <= 1.4.1 ve ...)
+ TODO: check
+CVE-2026-107743 (The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross ...)
+ TODO: check
+CVE-2026-107629 (The Greenshift \u2013 animation and page builder blocks plugin for Wor ...)
+ TODO: check
+CVE-2026-107627 (The Greenshift \u2013 animation and page builder blocks plugin for Wor ...)
+ TODO: check
+CVE-2026-107347 (HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink followi ...)
+ TODO: check
+CVE-2026-107329 (IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticat ...)
+ TODO: check
+CVE-2026-107328 (IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticat ...)
+ TODO: check
+CVE-2026-107327 (IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticat ...)
+ TODO: check
+CVE-2026-107326 (IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticat ...)
+ TODO: check
+CVE-2026-107060 (Insecure permissions in Tailscale versionCode 297862600 allows unautho ...)
+ TODO: check
+CVE-2026-107059 (An issue in Nextcloud versionCode 30390190 allows attackers to force v ...)
+ TODO: check
+CVE-2026-107058 (An issue in Shelter versionCode 445 allows attackers to register their ...)
+ TODO: check
+CVE-2026-107057 (An issue in AndBible versionCode 1111 allows attackers to execute arbi ...)
+ TODO: check
+CVE-2026-107056 (Insecure permissions in the io.file.importer.ImportActivity component ...)
+ TODO: check
+CVE-2026-107055 (Insecure permissions in the autosave component of AppML neutriNote CE ...)
+ TODO: check
+CVE-2026-107053 (Insecure permissions in foobnix Librera PDF Reader versionCode 7222 al ...)
+ TODO: check
+CVE-2026-107052 (Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module ...)
+ TODO: check
+CVE-2026-107051 (Insecure permissions in klassm AndFHEM v2.4.1 (versionCode 241, the ve ...)
+ TODO: check
+CVE-2026-107050 (An issue in libretro RetroArch v1.22.2 allows attackers to force anoth ...)
+ TODO: check
+CVE-2026-107049 (An issue in Forkyz versionCode 8500000 allows attackers to arbitrarily ...)
+ TODO: check
+CVE-2026-107048 (An issue in the WebView rendering path component of MotionCreative Mot ...)
+ TODO: check
+CVE-2026-107047 (Insecure permissions in mendhak GPSLogger versionCode 137 allows unaut ...)
+ TODO: check
+CVE-2026-107046 (A Server-Side Request Forgery (SSRF) in the url/title/author/coverUrl ...)
+ TODO: check
+CVE-2026-107045 (Insecure permissions in the CitrineContentProvider component of Citrin ...)
+ TODO: check
+CVE-2026-107044 (Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) ...)
+ TODO: check
+CVE-2026-107043 (Insecure permissions in Code Catcher versionCode 131 allow unauthorize ...)
+ TODO: check
+CVE-2026-107042 (Insecure permissions in USP Ultimate Screenshot Painter versionCode 24 ...)
+ TODO: check
+CVE-2026-107041 (Insecure permissions in the FeatureActionActivity component of Oasis F ...)
+ TODO: check
+CVE-2026-107040 (Insecure permissions in MBasov OMN-Go versionCode 26080824 allows unau ...)
+ TODO: check
+CVE-2026-107039 (Insecure permissions in the ActivityMain component of M66B/Marcel Bokh ...)
+ TODO: check
+CVE-2026-107038 (Insecure permissions in Yet Another UPnP Controller versionCode 50200 ...)
+ TODO: check
+CVE-2026-107037 (Insecure permissions in the NotificationHelper component of NoNonsense ...)
+ TODO: check
+CVE-2026-107036 (Insecure permissions in Mission Control / AIMSICD versionCode 20260805 ...)
+ TODO: check
+CVE-2026-107035 (Insecure permissions in the object/Page.java component of MBasov OMN O ...)
+ TODO: check
+CVE-2026-107034 (Insecure permissions in LeafPad / Leaf Note v1.21 (versionCode 21) all ...)
+ TODO: check
+CVE-2026-107033 (Insecure permissions in the MirakelInternalContentProvider component o ...)
+ TODO: check
+CVE-2026-107032 (Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCo ...)
+ TODO: check
+CVE-2026-107030 (Insecure permissions in craftxbox YubiClip XOR fork v1.0.1 (versionCod ...)
+ TODO: check
+CVE-2026-107029 (Insecure permissions in rubenalfon Pile v1.1.3 allows unauthorized att ...)
+ TODO: check
+CVE-2026-107028 (Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) ...)
+ TODO: check
+CVE-2026-107027 (Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) a ...)
+ TODO: check
+CVE-2026-107026 (Insecure permissions in Share to Clipboard v1.14.1 (versionCode 32) al ...)
+ TODO: check
+CVE-2026-107025 (Insecure permissions in WikiAndPad alpha/beta v0.2alpha03 (versionCode ...)
+ TODO: check
+CVE-2026-107024 (Insecure permissions in Share 2 Archive Today versionCode 61 allows un ...)
+ TODO: check
+CVE-2026-107023 (Insecure permissions in the ContentProvider component of mhss1 MyBrain ...)
+ TODO: check
+CVE-2026-107021 (Insecure permissions in the CardProvider content provider component of ...)
+ TODO: check
+CVE-2026-107020 (An issue in the activity.LoadLinkLaterActivity component of FeedEx / H ...)
+ TODO: check
+CVE-2026-107019 (Insecure permissions in the feiertage.ImportActivity component of Arbe ...)
+ TODO: check
+CVE-2026-107018 (Insecure permissions in Ghost Commander File Manager versionCode 479 a ...)
+ TODO: check
+CVE-2026-107017 (Insecure permissions in the ShortcutDispatchActivity component of canv ...)
+ TODO: check
+CVE-2026-107016 (Insecure permissions in Fossify v1.3.0 allows unauthorized attackers t ...)
+ TODO: check
+CVE-2026-107015 (Insecure permissions in Simple Contacts Pro versionCode 107 allow unau ...)
+ TODO: check
+CVE-2026-107014 (Insecure permissions in Bander Notepad (bander.notepad) versionCode 12 ...)
+ TODO: check
+CVE-2026-106036 (Szafir accepts any client or server certificate without performing cer ...)
+ TODO: check
+CVE-2026-104727 (The Sequential Order Numbers for WooCommerce plugin for WordPress is v ...)
+ TODO: check
+CVE-2026-104339 (IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to ...)
+ TODO: check
+CVE-2026-104331 (IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side req ...)
+ TODO: check
+CVE-2026-104328 (IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticat ...)
+ TODO: check
+CVE-2026-104324 (IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticat ...)
+ TODO: check
+CVE-2026-104317 (IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker wh ...)
+ TODO: check
+CVE-2026-104316 (IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated att ...)
+ TODO: check
+CVE-2026-104315 (IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side req ...)
+ TODO: check
+CVE-2026-104314 (IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated att ...)
+ TODO: check
+CVE-2026-104312 (IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated att ...)
+ TODO: check
+CVE-2026-104310 (IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticat ...)
+ TODO: check
+CVE-2026-104309 (IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticat ...)
+ TODO: check
+CVE-2026-104308 (IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticat ...)
+ TODO: check
+CVE-2026-103875 (The Media Library Assistant plugin for WordPress is vulnerable to Refl ...)
+ TODO: check
+CVE-2026-103665 (The installer for Yamaha LAN Monitor for Windows provided by Yamaha Co ...)
+ TODO: check
+CVE-2026-103485 (The Extensions for Leaflet Map plugin for WordPress is vulnerable to S ...)
+ TODO: check
+CVE-2026-103094 (ServiceNow has remediated an information disclosure vulnerability that ...)
+ TODO: check
+CVE-2026-103093 (ServiceNow has remediated a sandbox escape security issue that was ide ...)
+ TODO: check
+CVE-2026-103092 (IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticat ...)
+ TODO: check
+CVE-2026-102590 (IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticat ...)
+ TODO: check
+CVE-2026-102260 (HashiCorp Nomad and Nomad Enterprise are vulnerable to cross-namespace ...)
+ TODO: check
+CVE-2026-101288 (IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticat ...)
+ TODO: check
+CVE-2025-62841 (An use of hard-coded cryptographic key vulnerability has been reported ...)
+ TODO: check
+CVE-2025-62839 (An use of hard-coded cryptographic key vulnerability has been reported ...)
+ TODO: check
+CVE-2025-13050 (Broken Function Level Authorization allows execution of poller post-re ...)
+ TODO: check
+CVE-2025-12523 (Broken Object Level Authorization in Users Configuration Endpoint allo ...)
+ TODO: check
+CVE-2023-7357 (A remote code execution (RCE) vulnerability was identified in the Flex ...)
+ TODO: check
+CVE-2019-25781 (Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity ...)
+ TODO: check
CVE-2026-XXXX [GHSA-c968-33g3-wh7p: Package names in vendor/composer/installed.json can escape the vendor directory during install and reinstall]
- composer 2.11.0-1
NOTE: https://github.com/composer/composer/security/advisories/GHSA-c968-33g3-wh7p
@@ -412,23 +1250,23 @@ CVE-2026-XXXX [GHSA-gc7p-357m-xj2j]
CVE-2026-XXXX [GHSA-vj9g-4mg6-q9hw]
- amule 1:3.2.0-1
NOTE: https://github.com/amule-org/amule/security/advisories/GHSA-vj9g-4mg6-q9hw
-CVE-2026-105031
+CVE-2026-105031 (When using the OpenSSL TLS implementation, both the pn_ssl_domain_set_ ...)
- qpid-proton <unfixed>
NOTE: https://www.openwall.com/lists/oss-security/2026/10/28/22
NOTE: https://issues.apache.org/jira/browse/PROTON-2976
NOTE: https://github.com/apache/qpid-proton/commit/d793f97e4a2d0f960eda32724a2e867236468337 (0.41.1-rc1)
-CVE-2026-105042
+CVE-2026-105042 (A message body that is deeply nested and decoded by pn_message_body() ...)
- qpid-proton <unfixed>
NOTE: https://www.openwall.com/lists/oss-security/2026/10/28/23
NOTE: https://issues.apache.org/jira/browse/PROTON-2976
NOTE: https://github.com/apache/qpid-proton/commit/d793f97e4a2d0f960eda32724a2e867236468337 (0.41.1-rc1)
-CVE-2026-114230
+CVE-2026-114230 (When dispatching SASL frames to authenticate the peer, Proton will als ...)
- qpid-proton <unfixed>
NOTE: https://www.openwall.com/lists/oss-security/2026/10/28/24
NOTE: https://issues.apache.org/jira/browse/PROTON-2945
NOTE: https://github.com/apache/qpid-proton/commit/94e2df384a493cbb8a4870a40d90e08708e131eb (0.41.1-rc1)
NOTE: https://github.com/apache/qpid-proton/commit/b7fb4507bb233db10825e6ffd456086dedca22f6 (0.41.1-rc1)
-CVE-2026-115942
+CVE-2026-115942 (A misconfigured wildcard TLS certificate causes a stack read overflow. ...)
- qpid-proton <unfixed>
NOTE: https://www.openwall.com/lists/oss-security/2026/10/28/25
NOTE: https://issues.apache.org/jira/browse/PROTON-2974
@@ -1239,7 +2077,7 @@ CVE-2026-110182 (PostgreSQL Anonymizer contains a vulnerability related to the a
NOT-FOR-US: PostgreSQL software not packaged in Debian
CVE-2026-110181 (PostgreSQL Anonymizer contains a vulnerability related to anonymizatio ...)
NOT-FOR-US: PostgreSQL software not packaged in Debian
-CVE-2026-106972 (An uncontrolled recursion in the MessagePack\BufferUnpacker::unpack() ...)
+CVE-2026-106972 (Uncontrolled recursion in MessagePack\BufferUnpacker::unpack() in ryba ...)
TODO: check
CVE-2026-106971 (An integer overflow in the MessagePack\BufferUnpacker component of ryb ...)
TODO: check
@@ -2885,7 +3723,7 @@ CVE-2026-118005 (Use-after-free in the WebRTC: Signaling component. This vulnera
- firefox 159.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118005
CVE-2026-118004 (Incorrect boundary conditions in the CSS Transitions and Animations co ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2893,7 +3731,7 @@ CVE-2026-118004 (Incorrect boundary conditions in the CSS Transitions and Animat
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-118004
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118004
CVE-2026-118003 (Information disclosure in the Networking: DNS component. This vulnerab ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2901,7 +3739,7 @@ CVE-2026-118003 (Information disclosure in the Networking: DNS component. This v
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-118003
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118003
CVE-2026-118002 (Information disclosure due to race condition in the Networking compone ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2909,7 +3747,7 @@ CVE-2026-118002 (Information disclosure due to race condition in the Networking
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-118002
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118002
CVE-2026-118000 (Information disclosure in the Networking: HTTP component. This vulnera ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2917,7 +3755,7 @@ CVE-2026-118000 (Information disclosure in the Networking: HTTP component. This
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-118000
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118000
CVE-2026-117999 (Race condition in the IPC component. This vulnerability was fixed in F ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2925,7 +3763,7 @@ CVE-2026-117999 (Race condition in the IPC component. This vulnerability was fix
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117999
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117999
CVE-2026-117998 (Mitigation bypass in the DOM: Push Subscriptions component. This vulne ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2933,7 +3771,7 @@ CVE-2026-117998 (Mitigation bypass in the DOM: Push Subscriptions component. Thi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117998
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117998
CVE-2026-117997 (Sandbox escape due to use-after-free in the Widget component. This vul ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2941,7 +3779,7 @@ CVE-2026-117997 (Sandbox escape due to use-after-free in the Widget component. T
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117997
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117997
CVE-2026-117996 (Incorrect boundary conditions in the WebRTC component. This vulnerabil ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2949,7 +3787,7 @@ CVE-2026-117996 (Incorrect boundary conditions in the WebRTC component. This vul
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117996
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117996
CVE-2026-117995 (Privilege escalation in the DOM: UI Events & Focus Handling component. ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2957,7 +3795,7 @@ CVE-2026-117995 (Privilege escalation in the DOM: UI Events & Focus Handling com
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117995
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117995
CVE-2026-117994 (Use-after-free in the JavaScript: GC component. This vulnerability was ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2965,7 +3803,7 @@ CVE-2026-117994 (Use-after-free in the JavaScript: GC component. This vulnerabil
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117994
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117994
CVE-2026-117993 (Integer overflow in the Graphics: Text component. This vulnerability w ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2973,7 +3811,7 @@ CVE-2026-117993 (Integer overflow in the Graphics: Text component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117993
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117993
CVE-2026-117992 (Information disclosure in the CSS Parsing and Computation component. T ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2981,7 +3819,7 @@ CVE-2026-117992 (Information disclosure in the CSS Parsing and Computation compo
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117992
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117992
CVE-2026-117991 (Incorrect boundary conditions in the Layout: Text and Fonts component. ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2989,7 +3827,7 @@ CVE-2026-117991 (Incorrect boundary conditions in the Layout: Text and Fonts com
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117991
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117991
CVE-2026-117990 (Sandbox escape due to incorrect boundary conditions in the Graphics: W ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2997,7 +3835,7 @@ CVE-2026-117990 (Sandbox escape due to incorrect boundary conditions in the Grap
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117990
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117990
CVE-2026-117989 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3005,7 +3843,7 @@ CVE-2026-117989 (Use-after-free in the Graphics component. This vulnerability wa
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117989
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117989
CVE-2026-117988 (Sandbox escape due to incorrect boundary conditions in the Graphics: C ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3013,7 +3851,7 @@ CVE-2026-117988 (Sandbox escape due to incorrect boundary conditions in the Grap
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117988
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117988
CVE-2026-117987 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3021,7 +3859,7 @@ CVE-2026-117987 (Use-after-free in the Graphics component. This vulnerability wa
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117987
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117987
CVE-2026-117986 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3029,7 +3867,7 @@ CVE-2026-117986 (Use-after-free in the Graphics component. This vulnerability wa
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117986
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117986
CVE-2026-117985 (Sandbox escape due to use-after-free in the Graphics component. This v ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3037,7 +3875,7 @@ CVE-2026-117985 (Sandbox escape due to use-after-free in the Graphics component.
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117985
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117985
CVE-2026-117984 (Incorrect boundary conditions in the Layout: Scrolling and Overflow co ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3045,7 +3883,7 @@ CVE-2026-117984 (Incorrect boundary conditions in the Layout: Scrolling and Over
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117984
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117984
CVE-2026-117983 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3053,7 +3891,7 @@ CVE-2026-117983 (Use-after-free in the Graphics component. This vulnerability wa
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117983
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117983
CVE-2026-117982 (Invalid pointer in the JavaScript Engine: JIT component. This vulnerab ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3061,7 +3899,7 @@ CVE-2026-117982 (Invalid pointer in the JavaScript Engine: JIT component. This v
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117982
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117982
CVE-2026-117981 (Privilege escalation in the Toolkit component. This vulnerability was ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3069,7 +3907,7 @@ CVE-2026-117981 (Privilege escalation in the Toolkit component. This vulnerabili
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117981
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117981
CVE-2026-117980 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3077,7 +3915,7 @@ CVE-2026-117980 (Use-after-free in the Graphics component. This vulnerability wa
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117980
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117980
CVE-2026-117979 (Incorrect boundary conditions in the Graphics: WebRender component. Th ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3085,7 +3923,7 @@ CVE-2026-117979 (Incorrect boundary conditions in the Graphics: WebRender compon
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117979
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117979
CVE-2026-117978 (Incorrect boundary conditions in the Graphics component. This vulnerab ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3093,7 +3931,7 @@ CVE-2026-117978 (Incorrect boundary conditions in the Graphics component. This v
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117978
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117978
CVE-2026-117977 (Other issue in the Console component. This vulnerability was fixed in ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3101,7 +3939,7 @@ CVE-2026-117977 (Other issue in the Console component. This vulnerability was fi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117977
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117977
CVE-2026-117976 (Site isolation issue in the DOM: Navigation component. This vulnerabil ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3109,7 +3947,7 @@ CVE-2026-117976 (Site isolation issue in the DOM: Navigation component. This vul
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117976
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117976
CVE-2026-117975 (Sandbox escape due to invalid pointer in the Graphics: WebRender compo ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3117,7 +3955,7 @@ CVE-2026-117975 (Sandbox escape due to invalid pointer in the Graphics: WebRende
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117975
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117975
CVE-2026-117974 (Use-after-free in the XML component. This vulnerability was fixed in F ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3125,7 +3963,7 @@ CVE-2026-117974 (Use-after-free in the XML component. This vulnerability was fix
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117974
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117974
CVE-2026-117973 (Use-after-free in the Networking: DNS component. This vulnerability wa ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3133,7 +3971,7 @@ CVE-2026-117973 (Use-after-free in the Networking: DNS component. This vulnerabi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117973
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117973
CVE-2026-117972 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3141,7 +3979,7 @@ CVE-2026-117972 (Use-after-free in the Graphics component. This vulnerability wa
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117972
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117972
CVE-2026-117971 (Sandbox escape due to use-after-free in the Print Preview component. T ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3149,7 +3987,7 @@ CVE-2026-117971 (Sandbox escape due to use-after-free in the Print Preview compo
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117971
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117971
CVE-2026-117970 (Race condition in the Disability Access APIs component. This vulnerabi ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3157,7 +3995,7 @@ CVE-2026-117970 (Race condition in the Disability Access APIs component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117970
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117970
CVE-2026-117969 (Invalid pointer in the JavaScript Engine: JIT component. This vulnerab ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3165,7 +4003,7 @@ CVE-2026-117969 (Invalid pointer in the JavaScript Engine: JIT component. This v
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117969
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117969
CVE-2026-117968 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3173,7 +4011,7 @@ CVE-2026-117968 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117968
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117968
CVE-2026-117967 (Mitigation bypass in the DOM: Security component. This vulnerability w ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3181,7 +4019,7 @@ CVE-2026-117967 (Mitigation bypass in the DOM: Security component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117967
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117967
CVE-2026-117966 (Site isolation issue in the Networking: HTTP component. This vulnerabi ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3189,7 +4027,7 @@ CVE-2026-117966 (Site isolation issue in the Networking: HTTP component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117966
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117966
CVE-2026-117965 (Same-origin policy bypass in the Address Bar component. This vulnerabi ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3197,7 +4035,7 @@ CVE-2026-117965 (Same-origin policy bypass in the Address Bar component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117965
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117965
CVE-2026-117964 (Use-after-free in the Panning and Zooming component. This vulnerabilit ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3205,7 +4043,7 @@ CVE-2026-117964 (Use-after-free in the Panning and Zooming component. This vulne
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117964
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117964
CVE-2026-117963 (Incorrect boundary conditions in the DOM: Service Workers component. T ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3213,7 +4051,7 @@ CVE-2026-117963 (Incorrect boundary conditions in the DOM: Service Workers compo
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117963
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117963
CVE-2026-117962 (Sandbox escape due to incorrect boundary conditions in the Storage: Qu ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3221,7 +4059,7 @@ CVE-2026-117962 (Sandbox escape due to incorrect boundary conditions in the Stor
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117962
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117962
CVE-2026-117961 (Incorrect boundary conditions in the Layout: Text and Fonts component. ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3229,7 +4067,7 @@ CVE-2026-117961 (Incorrect boundary conditions in the Layout: Text and Fonts com
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117961
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117961
CVE-2026-117960 (Spoofing issue in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3237,7 +4075,7 @@ CVE-2026-117960 (Spoofing issue in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117960
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117960
CVE-2026-117959 (Site isolation issue in the DOM: Service Workers component. This vulne ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3245,7 +4083,7 @@ CVE-2026-117959 (Site isolation issue in the DOM: Service Workers component. Thi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117959
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117959
CVE-2026-117958 (Site isolation issue in the Networking: HTTP component. This vulnerabi ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3253,7 +4091,7 @@ CVE-2026-117958 (Site isolation issue in the Networking: HTTP component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117958
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117958
CVE-2026-117957 (Cryptographic issue in the WebRTC: Networking component. This vulnerab ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3261,7 +4099,7 @@ CVE-2026-117957 (Cryptographic issue in the WebRTC: Networking component. This v
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117957
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117957
CVE-2026-117956 (Invalid pointer in the Nimbus Desktop Client component. This vulnerabi ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3269,7 +4107,7 @@ CVE-2026-117956 (Invalid pointer in the Nimbus Desktop Client component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117956
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117956
CVE-2026-117955 (JIT miscompilation in the JavaScript: WebAssembly component. This vuln ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3277,7 +4115,7 @@ CVE-2026-117955 (JIT miscompilation in the JavaScript: WebAssembly component. Th
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117955
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117955
CVE-2026-117954 (Use-after-free in the Layout: Positioned component. This vulnerability ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3285,7 +4123,7 @@ CVE-2026-117954 (Use-after-free in the Layout: Positioned component. This vulner
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117954
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117954
CVE-2026-117953 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3293,7 +4131,7 @@ CVE-2026-117953 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117953
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117953
CVE-2026-117952 (Uninitialized memory in the Networking component. This vulnerability w ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3301,7 +4139,7 @@ CVE-2026-117952 (Uninitialized memory in the Networking component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117952
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117952
CVE-2026-117951 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3309,7 +4147,7 @@ CVE-2026-117951 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117951
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117951
CVE-2026-117950 (Incorrect boundary conditions in the DOM: Core & HTML component. This ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3317,7 +4155,7 @@ CVE-2026-117950 (Incorrect boundary conditions in the DOM: Core & HTML component
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117950
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117950
CVE-2026-117949 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3325,7 +4163,7 @@ CVE-2026-117949 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117949
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117949
CVE-2026-117948 (Use-after-free in the SVG component. This vulnerability was fixed in F ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3333,7 +4171,7 @@ CVE-2026-117948 (Use-after-free in the SVG component. This vulnerability was fix
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117948
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117948
CVE-2026-117947 (Use-after-free in the XML component. This vulnerability was fixed in F ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3341,7 +4179,7 @@ CVE-2026-117947 (Use-after-free in the XML component. This vulnerability was fix
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117947
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117947
CVE-2026-117946 (Incorrect boundary conditions in the JavaScript Engine component. This ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3349,7 +4187,7 @@ CVE-2026-117946 (Incorrect boundary conditions in the JavaScript Engine componen
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117946
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117946
CVE-2026-117945 (Incorrect boundary conditions in the XML component. This vulnerability ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3357,7 +4195,7 @@ CVE-2026-117945 (Incorrect boundary conditions in the XML component. This vulner
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117945
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117945
CVE-2026-117944 (Use-after-free in the Layout component. This vulnerability was fixed i ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3365,7 +4203,7 @@ CVE-2026-117944 (Use-after-free in the Layout component. This vulnerability was
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117944
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117944
CVE-2026-117943 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3373,7 +4211,7 @@ CVE-2026-117943 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117943
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117943
CVE-2026-117942 (Incorrect boundary conditions in the JavaScript Engine: JIT component. ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3381,7 +4219,7 @@ CVE-2026-117942 (Incorrect boundary conditions in the JavaScript Engine: JIT com
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117942
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117942
CVE-2026-117941 (Use-after-free in the DOM: CSS Object Model component. This vulnerabil ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3389,7 +4227,7 @@ CVE-2026-117941 (Use-after-free in the DOM: CSS Object Model component. This vul
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117941
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117941
CVE-2026-117940 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3397,7 +4235,7 @@ CVE-2026-117940 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117940
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117940
CVE-2026-117939 (Use-after-free in the XML component. This vulnerability was fixed in F ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3405,7 +4243,7 @@ CVE-2026-117939 (Use-after-free in the XML component. This vulnerability was fix
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117939
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117939
CVE-2026-117938 (Use-after-free in the Layout component. This vulnerability was fixed i ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3413,7 +4251,7 @@ CVE-2026-117938 (Use-after-free in the Layout component. This vulnerability was
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117938
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117938
CVE-2026-117937 (Invalid pointer in the JavaScript Engine component. This vulnerability ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3421,7 +4259,7 @@ CVE-2026-117937 (Invalid pointer in the JavaScript Engine component. This vulner
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117937
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117937
CVE-2026-117936 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3429,7 +4267,7 @@ CVE-2026-117936 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117936
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117936
CVE-2026-117935 (Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerabi ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3437,7 +4275,7 @@ CVE-2026-117935 (Use-after-free in the DOM: Bindings (WebIDL) component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117935
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117935
CVE-2026-117934 (Use-after-free in the Layout component. This vulnerability was fixed i ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3445,7 +4283,7 @@ CVE-2026-117934 (Use-after-free in the Layout component. This vulnerability was
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117934
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117934
CVE-2026-117933 (Frame poisoning in the CSS Parsing and Computation component. This vul ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3453,7 +4291,7 @@ CVE-2026-117933 (Frame poisoning in the CSS Parsing and Computation component. T
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117933
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117933
CVE-2026-117932 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3461,7 +4299,7 @@ CVE-2026-117932 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117932
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117932
CVE-2026-117931 (Use-after-free in the DOM: Events component. This vulnerability was fi ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3469,7 +4307,7 @@ CVE-2026-117931 (Use-after-free in the DOM: Events component. This vulnerability
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117931
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117931
CVE-2026-117930 (Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerabi ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3477,7 +4315,7 @@ CVE-2026-117930 (Use-after-free in the DOM: Bindings (WebIDL) component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117930
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117930
CVE-2026-117929 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3485,7 +4323,7 @@ CVE-2026-117929 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117929
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117929
CVE-2026-117928 (Same-origin policy bypass in the CSS Parsing and Computation component ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3493,7 +4331,7 @@ CVE-2026-117928 (Same-origin policy bypass in the CSS Parsing and Computation co
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117928
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117928
CVE-2026-117927 (Use-after-free in the SVG component. This vulnerability was fixed in F ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3501,7 +4339,7 @@ CVE-2026-117927 (Use-after-free in the SVG component. This vulnerability was fix
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117927
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117927
CVE-2026-117926 (Incorrect boundary conditions in the SVG component. This vulnerability ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3509,7 +4347,7 @@ CVE-2026-117926 (Incorrect boundary conditions in the SVG component. This vulner
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117926
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117926
CVE-2026-117925 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3517,7 +4355,7 @@ CVE-2026-117925 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117925
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117925
CVE-2026-117924 (Use-after-free in the XSLT component. This vulnerability was fixed in ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3525,7 +4363,7 @@ CVE-2026-117924 (Use-after-free in the XSLT component. This vulnerability was fi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117924
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117924
CVE-2026-117923 (Use-after-free in the Audio/Video component. This vulnerability was fi ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3533,7 +4371,7 @@ CVE-2026-117923 (Use-after-free in the Audio/Video component. This vulnerability
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117923
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117923
CVE-2026-117922 (Use-after-free in the Networking: WebSockets component. This vulnerabi ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3541,7 +4379,7 @@ CVE-2026-117922 (Use-after-free in the Networking: WebSockets component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117922
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117922
CVE-2026-117921 (Use-after-free in the CSS Parsing and Computation component. This vuln ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3549,7 +4387,7 @@ CVE-2026-117921 (Use-after-free in the CSS Parsing and Computation component. Th
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117921
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117921
CVE-2026-117920 (Use-after-free in the DOM: HTML Parser component. This vulnerability w ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3557,7 +4395,7 @@ CVE-2026-117920 (Use-after-free in the DOM: HTML Parser component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117920
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117920
CVE-2026-117919 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3565,7 +4403,7 @@ CVE-2026-117919 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117919
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117919
CVE-2026-117918 (Use-after-free in the Graphics: Canvas2D component. This vulnerability ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3573,7 +4411,7 @@ CVE-2026-117918 (Use-after-free in the Graphics: Canvas2D component. This vulner
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117918
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117918
CVE-2026-117917 (Invalid pointer in the Graphics: WebRender component. This vulnerabili ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3581,7 +4419,7 @@ CVE-2026-117917 (Invalid pointer in the Graphics: WebRender component. This vuln
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117917
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117917
CVE-2026-117916 (Use-after-free in the XSLT component. This vulnerability was fixed in ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3589,7 +4427,7 @@ CVE-2026-117916 (Use-after-free in the XSLT component. This vulnerability was fi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117916
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117916
CVE-2026-117915 (Incorrect boundary conditions in the Layout: Block and Inline componen ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3597,7 +4435,7 @@ CVE-2026-117915 (Incorrect boundary conditions in the Layout: Block and Inline c
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117915
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117915
CVE-2026-117914 (Use-after-free in the SVG component. This vulnerability was fixed in F ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3605,7 +4443,7 @@ CVE-2026-117914 (Use-after-free in the SVG component. This vulnerability was fix
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117914
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117914
CVE-2026-117913 (Use-after-free in the SVG component. This vulnerability was fixed in F ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3613,7 +4451,7 @@ CVE-2026-117913 (Use-after-free in the SVG component. This vulnerability was fix
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117913
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117913
CVE-2026-117912 (Same-origin policy bypass in the CSS Parsing and Computation component ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3621,7 +4459,7 @@ CVE-2026-117912 (Same-origin policy bypass in the CSS Parsing and Computation co
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117912
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117912
CVE-2026-117911 (Use-after-free in the Audio/Video: Playback component. This vulnerabil ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3629,7 +4467,7 @@ CVE-2026-117911 (Use-after-free in the Audio/Video: Playback component. This vul
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117911
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117911
CVE-2026-117910 (Invalid pointer in the JavaScript Engine component. This vulnerability ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3637,7 +4475,7 @@ CVE-2026-117910 (Invalid pointer in the JavaScript Engine component. This vulner
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117910
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117910
CVE-2026-117909 (Use-after-free in the JavaScript: GC component. This vulnerability was ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3645,7 +4483,7 @@ CVE-2026-117909 (Use-after-free in the JavaScript: GC component. This vulnerabil
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117909
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117909
CVE-2026-117908 (Use-after-free in the Graphics: ImageLib component. This vulnerability ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3653,7 +4491,7 @@ CVE-2026-117908 (Use-after-free in the Graphics: ImageLib component. This vulner
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117908
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117908
CVE-2026-117907 (Use-after-free in the Networking component. This vulnerability was fix ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3661,7 +4499,7 @@ CVE-2026-117907 (Use-after-free in the Networking component. This vulnerability
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117907
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117907
CVE-2026-117906 (Use-after-free in the CSS Parsing and Computation component. This vuln ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3669,7 +4507,7 @@ CVE-2026-117906 (Use-after-free in the CSS Parsing and Computation component. Th
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117906
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117906
CVE-2026-117905 (Use-after-free in the Audio/Video: Playback component. This vulnerabil ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3677,7 +4515,7 @@ CVE-2026-117905 (Use-after-free in the Audio/Video: Playback component. This vul
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117905
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117905
CVE-2026-117904 (Use-after-free in the JavaScript: GC component. This vulnerability was ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3685,7 +4523,7 @@ CVE-2026-117904 (Use-after-free in the JavaScript: GC component. This vulnerabil
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117904
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117904
CVE-2026-117903 (Use-after-free in the Audio/Video component. This vulnerability was fi ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3693,7 +4531,7 @@ CVE-2026-117903 (Use-after-free in the Audio/Video component. This vulnerability
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117903
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117903
CVE-2026-117902 (Use-after-free in the Layout: Text and Fonts component. This vulnerabi ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3701,7 +4539,7 @@ CVE-2026-117902 (Use-after-free in the Layout: Text and Fonts component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117902
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117902
CVE-2026-117901 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3709,7 +4547,7 @@ CVE-2026-117901 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117901
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117901
CVE-2026-117900 (Use-after-free in the DOM: Editor component. This vulnerability was fi ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3717,7 +4555,7 @@ CVE-2026-117900 (Use-after-free in the DOM: Editor component. This vulnerability
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117900
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117900
CVE-2026-117899 (Use-after-free in the Networking: HTTP component. This vulnerability w ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3725,7 +4563,7 @@ CVE-2026-117899 (Use-after-free in the Networking: HTTP component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117899
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117899
CVE-2026-117898 (Use-after-free in the JavaScript Engine: JIT component. This vulnerabi ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3733,7 +4571,7 @@ CVE-2026-117898 (Use-after-free in the JavaScript Engine: JIT component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117898
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117898
CVE-2026-117897 (Incorrect boundary conditions in the Layout: Tables component. This vu ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3741,7 +4579,7 @@ CVE-2026-117897 (Incorrect boundary conditions in the Layout: Tables component.
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117897
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117897
CVE-2026-117896 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3749,7 +4587,7 @@ CVE-2026-117896 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117896
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117896
CVE-2026-117895 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3757,7 +4595,7 @@ CVE-2026-117895 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117895
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117895
CVE-2026-117894 (Incorrect boundary conditions in the WebRTC: Signaling component. This ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3765,7 +4603,7 @@ CVE-2026-117894 (Incorrect boundary conditions in the WebRTC: Signaling componen
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117894
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117894
CVE-2026-117893 (Incorrect boundary conditions in the Security: PSM component. This vul ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3773,7 +4611,7 @@ CVE-2026-117893 (Incorrect boundary conditions in the Security: PSM component. T
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117893
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117893
CVE-2026-117892 (Privilege escalation due to use-after-free in the WebRTC: Networking c ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3781,7 +4619,7 @@ CVE-2026-117892 (Privilege escalation due to use-after-free in the WebRTC: Netwo
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117892
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117892
CVE-2026-117891 (Use-after-free in the JavaScript Engine: JIT component. This vulnerabi ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3789,7 +4627,7 @@ CVE-2026-117891 (Use-after-free in the JavaScript Engine: JIT component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117891
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117891
CVE-2026-117890 (JIT miscompilation in the JavaScript Engine: JIT component. This vulne ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3797,7 +4635,7 @@ CVE-2026-117890 (JIT miscompilation in the JavaScript Engine: JIT component. Thi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117890
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117890
CVE-2026-117889 (Incorrect boundary conditions in the JavaScript Engine component. This ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3805,7 +4643,7 @@ CVE-2026-117889 (Incorrect boundary conditions in the JavaScript Engine componen
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117889
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117889
CVE-2026-117888 (Uninitialized memory in the Graphics: Canvas2D component. This vulnera ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3813,7 +4651,7 @@ CVE-2026-117888 (Uninitialized memory in the Graphics: Canvas2D component. This
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117888
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117888
CVE-2026-117887 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3821,7 +4659,7 @@ CVE-2026-117887 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117887
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117887
CVE-2026-117886 (Incorrect boundary conditions in the Graphics: Text component. This vu ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3829,7 +4667,7 @@ CVE-2026-117886 (Incorrect boundary conditions in the Graphics: Text component.
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117886
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117886
CVE-2026-117885 (Use-after-free in the Layout: Grid component. This vulnerability was f ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3837,7 +4675,7 @@ CVE-2026-117885 (Use-after-free in the Layout: Grid component. This vulnerabilit
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117885
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117885
CVE-2026-117884 (Use-after-free in the Networking component. This vulnerability was fix ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3845,7 +4683,7 @@ CVE-2026-117884 (Use-after-free in the Networking component. This vulnerability
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117884
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117884
CVE-2026-117883 (Use-after-free in the DOM: HTML Parser component. This vulnerability w ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3853,7 +4691,7 @@ CVE-2026-117883 (Use-after-free in the DOM: HTML Parser component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117883
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117883
CVE-2026-117882 (Use-after-free in the Layout component. This vulnerability was fixed i ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3861,7 +4699,7 @@ CVE-2026-117882 (Use-after-free in the Layout component. This vulnerability was
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117882
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117882
CVE-2026-117881 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3869,7 +4707,7 @@ CVE-2026-117881 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117881
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117881
CVE-2026-117880 (Use-after-free in the XML component. This vulnerability was fixed in F ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3877,7 +4715,7 @@ CVE-2026-117880 (Use-after-free in the XML component. This vulnerability was fix
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117880
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117880
CVE-2026-117879 (Incorrect boundary conditions in the Layout: Tables component. This vu ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3885,7 +4723,7 @@ CVE-2026-117879 (Incorrect boundary conditions in the Layout: Tables component.
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117879
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117879
CVE-2026-117878 (Other issue, use-after-free in the Storage: IndexedDB component. This ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3893,7 +4731,7 @@ CVE-2026-117878 (Other issue, use-after-free in the Storage: IndexedDB component
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117878
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117878
CVE-2026-117877 (Use-after-free in the Layout: Text and Fonts component. This vulnerabi ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3901,7 +4739,7 @@ CVE-2026-117877 (Use-after-free in the Layout: Text and Fonts component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117877
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117877
CVE-2026-117876 (Use-after-free in the Layout: Text and Fonts component. This vulnerabi ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3909,7 +4747,7 @@ CVE-2026-117876 (Use-after-free in the Layout: Text and Fonts component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117876
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117876
CVE-2026-117875 (Use-after-free in the Layout: Scrolling and Overflow component. This v ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3917,7 +4755,7 @@ CVE-2026-117875 (Use-after-free in the Layout: Scrolling and Overflow component.
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117875
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117875
CVE-2026-117874 (Use-after-free in the Internationalization component. This vulnerabili ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3925,7 +4763,7 @@ CVE-2026-117874 (Use-after-free in the Internationalization component. This vuln
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117874
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117874
CVE-2026-117873 (Incorrect boundary conditions in the Audio/Video: Playback component. ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3933,7 +4771,7 @@ CVE-2026-117873 (Incorrect boundary conditions in the Audio/Video: Playback comp
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117873
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117873
CVE-2026-117872 (Use-after-free in the JavaScript: Standard Library component. This vul ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3941,7 +4779,7 @@ CVE-2026-117872 (Use-after-free in the JavaScript: Standard Library component. T
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117872
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117872
CVE-2026-117871 (Invalid pointer in the Graphics component. This vulnerability was fixe ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3949,7 +4787,7 @@ CVE-2026-117871 (Invalid pointer in the Graphics component. This vulnerability w
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117871
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117871
CVE-2026-117870 (Use-after-free in the JavaScript Engine component. This vulnerability ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3957,7 +4795,7 @@ CVE-2026-117870 (Use-after-free in the JavaScript Engine component. This vulnera
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117870
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117870
CVE-2026-117869 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3965,7 +4803,7 @@ CVE-2026-117869 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117869
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117869
CVE-2026-117868 (Sandbox escape in the DOM: Networking component. This vulnerability wa ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3973,7 +4811,7 @@ CVE-2026-117868 (Sandbox escape in the DOM: Networking component. This vulnerabi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117868
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117868
CVE-2026-117867 (Use-after-free in the Layout component. This vulnerability was fixed i ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3981,7 +4819,7 @@ CVE-2026-117867 (Use-after-free in the Layout component. This vulnerability was
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117867
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117867
CVE-2026-117866 (Privilege escalation due to use-after-free in the Graphics: Canvas2D c ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3989,7 +4827,7 @@ CVE-2026-117866 (Privilege escalation due to use-after-free in the Graphics: Can
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117866
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117866
CVE-2026-117865 (Use-after-free in the JavaScript: GC component. This vulnerability was ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3997,7 +4835,7 @@ CVE-2026-117865 (Use-after-free in the JavaScript: GC component. This vulnerabil
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117865
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117865
CVE-2026-117864 (Sandbox escape in the Form Manager component. This vulnerability was f ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -4005,7 +4843,7 @@ CVE-2026-117864 (Sandbox escape in the Form Manager component. This vulnerabilit
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117864
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117864
CVE-2026-117863 (Information disclosure due to uninitialized memory in the Audio/Video ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -4013,7 +4851,7 @@ CVE-2026-117863 (Information disclosure due to uninitialized memory in the Audio
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117863
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117863
CVE-2026-117862 (Privilege escalation due to incorrect boundary conditions in the Netwo ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -4021,7 +4859,7 @@ CVE-2026-117862 (Privilege escalation due to incorrect boundary conditions in th
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117862
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117862
CVE-2026-117861 (Sandbox escape in the DOM: Navigation component. This vulnerability wa ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -4029,7 +4867,7 @@ CVE-2026-117861 (Sandbox escape in the DOM: Navigation component. This vulnerabi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117861
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117861
CVE-2026-117860 (Same-origin policy bypass in the DOM: Navigation component. This vulne ...)
- {DSA-6590-1}
+ {DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6561,6 +7399,7 @@ CVE-2026-116153 (ImageMagick before 7.1.2-33 contains a heap buffer overflow vul
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7438-vh5v-v52h
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/3882fd7116e0794a05457f78da80cd39f83b52c3 (7.1.2-33)
CVE-2026-116152 (ImageMagick before 7.1.2-33 contains a memory leak vulnerability in th ...)
+ {DSA-6593-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-83w9-w85j-h9jc
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/62c7876c37347dee0be1872e623650ba59f8a541 (7.1.2-33)
@@ -7511,7 +8350,7 @@ CVE-2026-115889 (Wasmtime is a runtime for WebAssembly. Prior to 36.0.19 and 43.
NOTE: https://rustsec.org/advisories/RUSTSEC-2026-0380.html
NOTE: https://github.com/advisories/GHSA-897f-g5gm-fmxm
NOTE: https://github.com/bytecodealliance/wasmtime/pull/12613
-CVE-2026-109411 (An access control bypass flaw was found in Samba's vfs_ceph_rgw module ...)
+CVE-2026-109411 (An access control bypass flaw was identified in Samba's vfs_ceph_rgw m ...)
- samba 2:4.25.1+dfsg-1
[trixie] - samba <not-affected> (Vulnerable code not present)
[bookworm] - samba <not-affected> (Vulnerable code not present)
@@ -19548,6 +20387,7 @@ CVE-2026-98433 (In the Linux kernel, the following vulnerability has been resolv
[bookworm] - linux 6.1.190-1
NOTE: https://git.kernel.org/linus/0a416ee20bcccddf91ca5b63696a23b9d11d73aa (7.3-rc4)
CVE-2026-114145 (GitPython is a python library used to interact with Git repositories. ...)
+ {DSA-6594-1}
- python-git 3.2.1-1
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-83vg-56qc-22m7
NOTE: https://github.com/gitpython-developers/GitPython/pull/2264
@@ -22113,6 +22953,7 @@ CVE-2026-110862 (Better Auth from 1.4.0-beta.18 before 1.7.7 contains an authent
CVE-2026-110861 (Better Auth @better-auth/drizzle-adapter and better-auth from 1.6.17 b ...)
NOT-FOR-US: Better Auth
CVE-2026-110860 (GitPython from 3.1.62 before 3.2.0 contains a symlink-following flaw i ...)
+ {DSA-6594-1}
- python-git 3.2.1-1
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-gq48-pqfc-9p58
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/fb7e089ee0a3394c67057c11bb7f92682ac7960d (3.2.0)
@@ -22123,18 +22964,22 @@ CVE-2026-110859 (GitPython before 3.2.0 contains an argument injection vulnerabi
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/8da65080849a56a2fc9f3e7817bbf0524e8397d5 (3.2.0)
NOTE: CVE exists because of an incomplete fix for CVE-2026-78679
CVE-2026-110858 (GitPython from 3.1.30 before 3.2.0 contains a remote code execution vu ...)
+ {DSA-6594-1}
- python-git 3.2.1-1
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-f9j4-qggq-h239
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/dafafff7e5438879d0167c17008342231f7af314 (3.2.0)
CVE-2026-110857 (GitPython before 3.2.0 contains a remote code execution vulnerability ...)
+ {DSA-6594-1}
- python-git 3.2.1-1
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-w8jc-g24h-crhw
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/9ad28cc4c7176d22cd6181d69805058a719dd03b (3.2.0)
CVE-2026-110856 (GitPython before 3.2.0 contains a regular expression denial of service ...)
+ {DSA-6594-1}
- python-git 3.2.1-1
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-m64x-33q8-m5h7
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/8290c98d35465a38090cdcc1b17be69967092a15 (3.2.0)
CVE-2026-110855 (GitPython before 3.2.0 contains an information disclosure vulnerabilit ...)
+ {DSA-6594-1}
- python-git 3.2.1-1
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-fx3j-rwgx-fr94
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/9349ff58ee00c9fb14d515c8e693f33b2144b238 (3.2.0)
@@ -30337,7 +31182,7 @@ CVE-2026-109262 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/2eff6be3785d980bb5190244ad432fe6282d29e3 (7.1.2-32)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/a568d698ffb3dd57134fef8e9b64b61f1154a1df (6.9.13-57)
CVE-2026-109261 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory ...)
- {DLA-4858-1}
+ {DSA-6593-1 DLA-4858-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w68r-6fmr-cvg4
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/1c7763266cfedc635005a965169bc2ddcc650221 (7.1.2-32)
@@ -31699,7 +32544,7 @@ CVE-2026-42697 (Improper Neutralization of Input During Web Page Generation ('Cr
NOT-FOR-US: WordPress plugin or theme
CVE-2026-42696 (Improper Control of Generation of Code ('Code Injection') vulnerabilit ...)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-42693 (Unauthenticated Cross Site Scripting (XSS) in Jannah <= 7.6.5 versions ...)
+CVE-2026-42693 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-42633 (Subscriber SQL Injection in Events Manager <= 7.4.6 versions.)
NOT-FOR-US: WordPress plugin or theme
@@ -34921,19 +35766,19 @@ CVE-2026-107212 (Excelize is a Go language library for reading and writing Micro
CVE-2026-107211 (Excelize is a Go language library for reading and writing Microsoft Ex ...)
NOT-FOR-US: Excelize
CVE-2026-107210 (ImageMagick is free and open-source software used for editing and mani ...)
- {DLA-4858-1}
+ {DSA-6593-1 DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3j4w-pvxj-fpjc
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/ae2ed8c81d8fad1f186e7f2bc0837b46a1c7be61 (7.1.2-30)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/7d8e0eb11804a5ce5322ea317dfd3557cded4e7b (6.9.13-55)
CVE-2026-107209 (ImageMagick is free and open-source software used for editing and mani ...)
- {DLA-4858-1}
+ {DSA-6593-1 DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f2r2-qw7g-3c8x
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/326451aae51ac2dabc99fe66e063de6ec14cf8c8 (7.1.2-30)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/04a4c5b89c034cf2c93bb0a10044332d941b4fa5 (6.9.13-55)
CVE-2026-107208 (ImageMagick is free and open-source software used for editing and mani ...)
- {DLA-4858-1}
+ {DSA-6593-1 DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-27m9-54jx-fgvq
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/907b74817836b4f88e7453f0e95c849a1c5311aa (7.1.2-30)
@@ -35008,13 +35853,13 @@ CVE-2026-107103 (This vulnerability exists in the ERP system due to insufficient
CVE-2026-107102 (This vulnerability exists in the ERP system due to improper validation ...)
NOT-FOR-US: Manacle Technologies Multi-tenant ERP System
CVE-2026-106580 (ImageMagick is free and open-source software used for editing and mani ...)
- {DLA-4858-1}
+ {DSA-6593-1 DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r868-pmwh-fv2c
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/768bdd0dbb9a9ad743b6a6e557126b788b325970 (7.1.2-31)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/ad178e41fce2afa6be2b91fb4e7f41c4c5448117 (6.9.13-56)
CVE-2026-106579 (ImageMagick is free and open-source software used for editing and mani ...)
- {DLA-4858-1}
+ {DSA-6593-1 DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vcjj-32hg-qpx5
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/82f373fedb3425c83a239103ab86f4fa86fd49ac (7.1.2-31)
@@ -35022,13 +35867,13 @@ CVE-2026-106579 (ImageMagick is free and open-source software used for editing a
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/ac85c8e0a319b1eaf4c3d05d326605f5bae723d6 (6.9.13-56)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/c54667bfe605ebdc17c23cb70a26dbe00b338222 (6.9.13-56)
CVE-2026-106578 (ImageMagick is free and open-source software used for editing and mani ...)
- {DLA-4858-1}
+ {DSA-6593-1 DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6xf5-c3jx-rp39
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/5d29c094020612dc8fb471b10fc1d1cc6e9e4378 (7.1.2-31)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/bfe0117fd9742b3970383e000978d64e5e04372d (6.9.13-56)
CVE-2026-106577 (ImageMagick is free and open-source software used for editing and mani ...)
- {DLA-4858-1}
+ {DSA-6593-1 DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5rg6-j44q-q892
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/2ba2edfd04a1ab3d45af4a0dc1e640dde7020192 (7.1.2-31)
@@ -35036,43 +35881,46 @@ CVE-2026-106577 (ImageMagick is free and open-source software used for editing a
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/879489740daa44dd72e9405b26c845e8aa3d2f53 (6.9.13-56)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/d5750d7309ef5a8cd561430d932a183e4168f484 (6.9.13-56)
CVE-2026-106576 (ImageMagick is free and open-source software used for editing and mani ...)
+ {DSA-6593-1}
- imagemagick 8:7.1.2.31+dfsg1-1
[bookworm] - imagemagick <not-affected> (vulnerable code introduced later)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v45j-x8p4-3mh4
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/f491576297141ff685dc4460d811986f5b6b6cec (7.1.2-31)
NOTE: Introduced by: https://github.com/ImageMagick/ImageMagick/commit/fc4f67bb1b8eb1b61ae70e401482844086949721 (7.1.1-7)
CVE-2026-106575 (ImageMagick is free and open-source software used for editing and mani ...)
+ {DSA-6593-1}
- imagemagick 8:7.1.2.31+dfsg1-1
[bookworm] - imagemagick <not-affected> (vulnerable code introduced in im7)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2w4h-697j-4vrm
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/86672a16cedbf5a06d64e629e058310d683bb48e (7.1.2-31)
NOTE: wand script is a feature of imagemagick 7
CVE-2026-106574 (ImageMagick is free and open-source software used for editing and mani ...)
+ {DSA-6593-1}
- imagemagick 8:7.1.2.31+dfsg1-1
[bookworm] - imagemagick <not-affected> (vulnerable code introduced in im7)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4fq9-vrx7-gv92
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/c69f54e1c8660e45f2ff83c354bf924a946d9356 (7.1.2-31)
NOTE: Only im7: https://github.com/ImageMagick/ImageMagick6/issues/479#issuecomment-6398829047
CVE-2026-106573 (ImageMagick is free and open-source software used for editing and mani ...)
- {DLA-4858-1}
+ {DSA-6593-1 DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qr53-hc3p-fc62
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/c311471c4e4978494834c707b417bc033d95cc48 (7.1.2-31)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/49560a1641f72a127e413b9861eca0997fde2b96 (6.9.13-56)
CVE-2026-106572 (ImageMagick is free and open-source software used for editing and mani ...)
- {DLA-4858-1}
+ {DSA-6593-1 DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wxw6-98rj-hjfr
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/19bce64e3667ff0348d559e2526c850f8fbe2b5a (7.1.2-30)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/0ca580238abba18910cfee0fcc3159621fec0dee (6.9.13-55)
CVE-2026-106571 (ImageMagick is free and open-source software used for editing and mani ...)
- {DLA-4858-1}
+ {DSA-6593-1 DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jvjm-9f73-fhpq
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/8f3a15e60b723bfe3e80bd1b5e4bee88397467f7 (7.1.2-31)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/91f4ed74a1fd8326ade11a1153de110f22d89aa1 (6.9.13-56)
CVE-2026-106570 (ImageMagick is free and open-source software used for editing and mani ...)
- {DLA-4858-1}
+ {DSA-6593-1 DLA-4858-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150337)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2vwg-3g4g-qprm
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/cafc7372c8113a9636766f0eddde7b90373c9b44 (7.1.2-32)
@@ -35086,30 +35934,31 @@ CVE-2026-106569 (ImageMagick is free and open-source software used for editing a
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/5ecd5b047cee7ccfe4e14a733a0755c7b2a90c7d (7.1.2-32)
NOTE: ASE coder introduced in 7.1.2.30
CVE-2026-106568 (ImageMagick is free and open-source software used for editing and mani ...)
- {DLA-4858-1}
+ {DSA-6593-1 DLA-4858-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150337)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9p7q-63hw-mcr4
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/e4f7ad983df6c831832eba3689f96b75f8b67051 (7.1.2-32)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/27e36ca5cb446664bfc284d28d91fced8887b025 (6.9.13-57)
CVE-2026-106567 (ImageMagick is free and open-source software used for editing and mani ...)
- {DLA-4858-1}
+ {DSA-6593-1 DLA-4858-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150337)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g6p6-3ggg-3w7j
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/f053f778409932d55b95758c4b1516b63191d1eb (7.1.2-32)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/61024a2677a3c7973a2dd27170877d8e51419473 (6.9.13-57)
CVE-2026-106566 (ImageMagick is free and open-source software used for editing and mani ...)
- {DLA-4858-1}
+ {DSA-6593-1 DLA-4858-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150337)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-54hm-vrmh-75qj
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/48e5ce1779fc640a389f0020fd7d965d0c08236e (7.1.2-32)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/11d2af00a948e9ca2919d9a8684d335a48484094 (6.9.13-57)
CVE-2026-106565 (ImageMagick is free and open-source software used for editing and mani ...)
- {DLA-4858-1}
+ {DSA-6593-1 DLA-4858-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150337)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-m9c7-gf3j-hx6h
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/e9872c4a165d869e75d10799c47195725ebf4132 (7.1.2-32)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/82f752927a552cbba1213b1d023b85e76845774c (6.9.13-57)
CVE-2026-106564 (ImageMagick is free and open-source software used for editing and mani ...)
+ {DSA-6593-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150337)
[bookworm] - imagemagick <not-affected> (vulnerable code introduced later)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-54rx-5x9g-g465
@@ -36283,7 +37132,7 @@ CVE-2026-32569 (Unauthenticated Cross Site Scripting (XSS) in WP Media folder <=
NOT-FOR-US: WordPress plugin or theme
CVE-2026-32568 (Subscriber Remote Code Execution (RCE) in WooCommerce Designer Pro <= ...)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-32557 (Unauthenticated SQL Injection in WooCommerce Appointments <= 5.3.2 ver ...)
+CVE-2026-32557 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-26287 (External Secrets Operator reads information from a third-party service ...)
NOT-FOR-US: external-secrets
@@ -45011,7 +45860,7 @@ CVE-2026-102877 (Fider before 0.38.0 contains a server-side request forgery vuln
CVE-2026-102876 (SurrealDB before 3.3.0 contains an authorization bypass in HTTP sessio ...)
NOT-FOR-US: SurrealDB
CVE-2026-102875 (VLC media player before 3.0.24 contains a path traversal vulnerability ...)
- {DSA-6515-1}
+ {DSA-6515-1 DLA-4869-1}
- vlc 3.0.24-1
NOTE: https://code.videolan.org/videolan/vlc/-/commit/59934edbd03c6c1147d75d6c91e96633b710ec31 (3.0.24-rc1)
NOTE: https://code.videolan.org/videolan/vlc/-/commit/8d43e99c2c01d9aab3ecad00e7a102806262b06b (3.0.24-rc1)
@@ -45581,7 +46430,7 @@ CVE-2026-102673 (Electron is a framework for writing cross-platform desktop appl
CVE-2026-102639 (MobilityDB version 1.3.0 and earlier contains an out-of-bounds read vu ...)
NOT-FOR-US: MobilityDB
CVE-2026-102635 (ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain uninitializ ...)
- {DLA-4858-1}
+ {DSA-6593-1 DLA-4858-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1149974)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-rvv7-5mh8-vcfc
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/a0ca2c739c0216ff4efbd631d1ba7fd54dba1ff4 (7.1.2-32)
@@ -46103,7 +46952,7 @@ CVE-2026-100800 (Sandbox escape due to use-after-free in the Disability Access A
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100800
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100800
CVE-2026-100801 (Privilege escalation in the DLL Services component. This vulnerability ...)
- {DSA-6590-1 DSA-6536-1 DSA-6533-1 DLA-4814-1 DLA-4810-1}
+ {DSA-6590-1 DSA-6536-1 DSA-6533-1 DLA-4866-1 DLA-4814-1 DLA-4810-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -48141,6 +48990,7 @@ CVE-2026-100690 (Hugo versions from v0.161.0 through v0.165.0 run Node.js tools
[bookworm] - hugo <not-affected> (Vulnerable code not present, only affects 0.161 and later)
NOTE: https://github.com/gohugoio/hugo/security/advisories/GHSA-x3mx-cm49-8m9c
CVE-2026-100689 (GitPython before 3.1.62 does not validate the `path` field read from a ...)
+ {DSA-6594-1}
- python-git 3.1.62-1
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-59cr-6r3x-644w
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/1ed0ebc2f2e74d979cdc367a4864a7731fdcc093 (3.1.62)
@@ -57288,25 +58138,26 @@ CVE-2026-93592 (vLLM versions before 0.28.0 fail to validate the lower bound of
CVE-2026-93591 (SiYuan versions before 3.8.3 contain an SQL injection vulnerability in ...)
NOT-FOR-US: SiYuan
CVE-2026-93590 (ImageMagick before 7.1.2-31 contains a policy bypass vulnerability in ...)
+ {DSA-6593-1}
- imagemagick 8:7.1.2.31+dfsg1-1
[bookworm] - imagemagick <not-affected> (vulnerable code introduced later)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7hjx-392p-f8cm
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/59046410c17e9421f0ad7b4bec478a892cf30c12 (7.1.2-31)
NOTE: UHDR coder introduced in 7.1.2-30
CVE-2026-93589 (ImageMagick before 7.1.2-31 and 6.9.13-56 contains a division-by-zero ...)
- {DLA-4858-1}
+ {DSA-6593-1 DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4gg2-hfgh-6f5c
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/8f620237fe341e814430fe3621b867b0b615f446 (7.1.2-31)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/1e91833e30a88c104276dcfbc01bb68ac4528514 (6.9.13-56)
CVE-2026-93588 (ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a NULL point ...)
- {DLA-4858-1}
+ {DSA-6593-1 DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-92rw-c5mw-27v4
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/c4b3c9039a1509e3e7869331773865b521a62f93 (7.1.2-31)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/3b124bb81d3c53ec7d2b46f5ea04c00c4b07b9b3 (6.9.13-56)
CVE-2026-93587 (ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a policy byp ...)
- {DLA-4858-1}
+ {DSA-6593-1 DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-89wq-f8f6-2j2v
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/d779ac52f92c3045ced59362b483bee25a3fc784 (7.1.2-31)
@@ -57314,7 +58165,7 @@ CVE-2026-93587 (ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a poli
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/4332e26659c849bf126aecb215482de1eed73308 (6.9.13-56)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/0d768346a13b63e4d791be4b798482abd1e050d5 (6.9.13-56)
CVE-2026-93586 (ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a use-after- ...)
- {DLA-4858-1}
+ {DSA-6593-1 DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3rjr-534c-8v67
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/282f455de5c80a7a0d1a713087db9c8fce344141 (7.1.2-31)
@@ -73473,15 +74324,18 @@ CVE-2026-87821 (Lara Dashboard through 1.3.1 contains a server-side request forg
CVE-2026-87820 (CyberPanel versions 2.4.3 through 2.4.5 expose unauthenticated AI Scan ...)
NOT-FOR-US: CyberPanel
CVE-2026-87819 (GitPython before 3.1.60 contains a regular expression denial of servic ...)
+ {DSA-6594-1}
- python-git 3.1.61-1
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-g5vv-9gxw-82hx
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/751473a5f3221d6f989291cbebcc404353fd3ba8 (3.1.60)
NOTE: Followup for bug introduced by CVE fix: https://github.com/gitpython-developers/GitPython/commit/bc63b027e2fc737e2ec0222bfa764e1aa76a427f (3.1.61)
CVE-2026-87818 (GitPython 3.1.59 fails to restrict the --no-index option in the high-l ...)
+ {DSA-6594-1}
- python-git 3.1.61-1
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-whh4-5q6c-9v3x
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/09f2cf383a992d1af697364569e9f384748c1bd8 (3.1.60)
CVE-2026-87817 (GitPython before 3.1.60 fails to properly validate the git directory l ...)
+ {DSA-6594-1}
- python-git 3.1.61-1
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-239g-whfq-7xj9
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/c7cf4d13b1ed0a2e70f2a1f3c6b4fc6c2652cf0b (3.1.60)
@@ -73795,7 +74649,7 @@ CVE-2026-74761 (Improper input validation in TopicRegion in Apache ActiveMQ, Apa
CVE-2026-73334 (Potential problem for users of theorg.apache.parquet.crypto.keytools p ...)
NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-73324 (Certain VLC media player builds in versions 3.0.0 through 3.0.23 conta ...)
- {DSA-6515-1}
+ {DSA-6515-1 DLA-4869-1}
- vlc 3.0.24-1
CVE-2026-70425 (Dell PowerScale OneFS, Versions 9.5.0.0 through 9.7.1.0, Versions 9.8. ...)
NOT-FOR-US: Dell / EMC
@@ -73816,7 +74670,7 @@ CVE-2026-61907 (An issue was discovered in Cyrus IMAP before 3.12.4. JMAP snooze
CVE-2026-57866 (Server side request forgery in Apache Impala versions 4.4.x and 4.5.x. ...)
NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-56711 (VLC media player versions 3.0.0 through 3.0.23 contain a memory-safety ...)
- {DSA-6515-1}
+ {DSA-6515-1 DLA-4869-1}
- vlc 3.0.24-1
CVE-2026-56207 (Signature of Bearer token is not verified in last step of SAML2 authen ...)
NOT-FOR-US: Apache software not packaged in Debian
@@ -75673,7 +76527,7 @@ CVE-2026-84391 (A use of uninitialized variable vulnerability in Fortinet FortiA
NOT-FOR-US: Fortinet
CVE-2026-84389 (A url redirection to untrusted site ('open redirect') vulnerability in ...)
NOT-FOR-US: Fortinet
-CVE-2026-84387 (A improper neutralization of special elements used in a command ('comm ...)
+CVE-2026-84387 (An Improper Neutralization of Special Elements used in a Command ('Com ...)
NOT-FOR-US: Fortinet
CVE-2026-84386 (A unverified ownership vulnerability in Fortinet FortiClientWindows 7. ...)
NOT-FOR-US: Fortinet
@@ -78417,19 +79271,19 @@ CVE-2026-86427 (LibreNMS before 26.8.0 contains an argument injection vulnerabil
CVE-2026-86426 (LibreNMS before 26.8.0 contains an authentication bypass vulnerability ...)
NOT-FOR-US: LibreNMS
CVE-2026-86425 (ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap ...)
- {DLA-4858-1}
+ {DSA-6593-1 DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1 (bug #1147176)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-chf5-8rv9-gjqr
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/5bff96a5c8d0b3dafa4ad4fa7916db4cae72a11d (7.1.2-30)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/e006a69e03f3aff34e9a7af90a0793ec6d879b48 (6.9.13-55)
CVE-2026-86424 (ImageMagick before 7.1.2-30 and 6.9.13-55 contains a time-of-check-tim ...)
- {DLA-4858-1}
+ {DSA-6593-1 DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1 (bug #1147176)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9x6f-98x9-rx6g
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/a44ef50cc494253f7d9f0229bb25c064a8e2ae69 (7.1.2-30)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/0b47fb7e3d5650b2be88fd3a8c15096765970ce3 (6.9.13-55)
CVE-2026-86423 (ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap ...)
- {DLA-4858-1}
+ {DSA-6593-1 DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1 (bug #1147176)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5m9j-96ff-j6qc
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/1d3e98913f6a8fa34b5a4180eadb9ed195b918a8 (7.1.2-30)
@@ -78438,13 +79292,13 @@ CVE-2026-86422 (ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use
- imagemagick <not-affected> (Only affects ImageMagick on Windows)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-x8g2-7r3w-h44p
CVE-2026-86421 (ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in th ...)
- {DLA-4858-1}
+ {DSA-6593-1 DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1 (bug #1147176)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4jv7-q6xw-6f4x
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/c83153dfc128de8e7c538f879c532c7d36a75abb (7.1.2-30)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/d56cab9f2253373e57c2e77809ab12abbbbdd680 (6.9.13-55)
CVE-2026-86420 (ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the ...)
- {DLA-4858-1}
+ {DSA-6593-1 DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1 (bug #1147176)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4mwf-mggw-29vp
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/6ac07556a93b2de00c845cd535ca256f45a47154 (7.1.2-30)
@@ -79154,7 +80008,7 @@ CVE-2026-16310 (The MemberDash plugin for WordPress is vulnerable to Insecure Di
NOT-FOR-US: WordPress plugin
CVE-2026-13159 (The Real Estate Papi WordPress theme through 1.0.5 does not perform ca ...)
NOT-FOR-US: WordPress plugin
-CVE-2026-85498 [Regression in CVE-2026-4897 fix (polkit read_cookie()) - stack buffer underflow]
+CVE-2026-85498 (A flaw was found in polkit. When processing input that begins with a n ...)
- policykit-1 <unfixed> (bug #1149960)
[trixie] - policykit-1 <not-affected> (Fix for CVE-2026-4897 not applied)
[bookworm] - policykit-1 <not-affected> (Fix for CVE-2026-4897 not applied)
@@ -92845,23 +93699,28 @@ CVE-2026-78680 (NLTK versions before 3.10.3 fail to use validated absolute paths
[bookworm] - nltk <postponed> (Minor issue)
NOTE: https://github.com/nltk/nltk/security/advisories/GHSA-6hwm-xvph-95vm
CVE-2026-78679 (GitPython before 3.1.59 contains an arbitrary file read vulnerability ...)
+ {DSA-6594-1}
- python-git 3.1.61-1 (bug #1145672)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-3wxw-xv34-2frg
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/1b0d2d9b91575f7db44ef4ff58ac37fc9335e5f6 (3.1.59)
NOTE: When fixing this issue make sure to fix it completely to not open up CVE-2026-110859
CVE-2026-78678 (GitPython versions before 3.1.59 contain an incomplete denylist in the ...)
+ {DSA-6594-1}
- python-git 3.1.61-1 (bug #1145672)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-5xxx-qhh7-9287
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/1b0d2d9b91575f7db44ef4ff58ac37fc9335e5f6 (3.1.59)
CVE-2026-78677 (GitPython before 3.1.59 omits --separate-git-dir from unsafe_git_clone ...)
+ {DSA-6594-1}
- python-git 3.1.61-1 (bug #1145672)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-8mcc-hrx5-hvxc
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/b68afff45af0f49e79a3e2d2162018986b37ad5d (3.1.59)
CVE-2026-78676 (GitPython before 3.1.59 fails to safely re-serialize multi-line git-co ...)
+ {DSA-6594-1}
- python-git 3.1.61-1 (bug #1145672)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-284h-m62q-gf8w
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/4b4e47fc1224e23b0c8ee7220a7192818f2e4abb (3.1.59)
CVE-2026-78675 (GitPython before 3.1.59 fails to disable merge_includes when parsing . ...)
+ {DSA-6594-1}
- python-git 3.1.61-1 (bug #1145672)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-7833-fr7j-v32q
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/ef7568e3b317ce617eacda39b8b54dcdff8c3b5c (3.1.59)
@@ -97380,26 +98239,32 @@ CVE-2026-76224 (ArcadeDB before 26.8.1 (arcadedb-gremlin, affected <= 26.7.3) co
CVE-2026-76223 (ArcadeDB (com.arcadedb) versions 26.7.3 and earlier fail to enforce th ...)
NOT-FOR-US: ArcadeDB
CVE-2026-76222 (GitPython before 3.1.58 fails to validate submodule names from .gitmod ...)
+ {DSA-6594-1}
- python-git 3.1.61-1 (bug #1144929)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-hmq2-w58f-27jc
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/e4b8e7d026ca6abb4cf604f8e77093432ce23c06 (3.1.58)
CVE-2026-76221 (GitPython before 3.1.58 contains a config-name injection vulnerability ...)
+ {DSA-6594-1}
- python-git 3.1.61-1 (bug #1144929)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-jm78-9fvv-mhgr
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/a495ccd3b547ccd60b2187215823b72a9c0188bf (3.1.58)
CVE-2026-76220 (GitPython before 3.1.58 contains a command execution vulnerability in ...)
+ {DSA-6594-1}
- python-git 3.1.61-1 (bug #1144929)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-wvpp-8hx9-p66j
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/96a888f4d782cb2f80452148e48e60ce4af6d541 (3.1.58)
CVE-2026-76219 (GitPython versions before 3.1.58 contain an arbitrary file overwrite v ...)
+ {DSA-6594-1}
- python-git 3.1.61-1 (bug #1144929)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-4gmw-gg2m-w46p
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/9b5dcaf85da5946dbf69dcd53f9edba08f760b32 (3.1.58)
CVE-2026-76218 (GitPython before 3.1.58 contains a remote code execution vulnerability ...)
+ {DSA-6594-1}
- python-git 3.1.61-1 (bug #1144929)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-9rj7-rf2p-w77r
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/d9ddb55bdc66ffe8c9932fe460e6b8c8211e47c7 (3.1.58)
CVE-2026-76217 (GitPython versions before 3.1.58 fail to validate options passed to gi ...)
+ {DSA-6594-1}
- python-git 3.1.61-1 (bug #1144929)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-hh9p-6wh2-4mfc
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/f2550b65bf60ca087190981e2c7b6865e201f40c (3.1.58)
@@ -108603,31 +109468,38 @@ CVE-2026-73626 (JupyterLab versions >=4.6.0,<=4.6.1 and <=4.5.9 contain an allow
NOTE: https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-whvh-wf3x-g77j
NOTE: Fixed by: https://github.com/jupyterlab/jupyterlab/commit/be9303f5bcd5308eaeae953c5a3c903046682c2c (v4.5.10)
CVE-2026-73625 (GitPython versions before 3.1.54 contain a remote code execution vulne ...)
+ {DSA-6594-1}
- python-git 3.1.61-1 (bug #1144344)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-r9mr-m37c-5fr3
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/e8d0fbf774d1f6baa3b481adfe48bd262e43b453 (3.1.54)
CVE-2026-73624 (GitPython versions before 3.1.54 contain an arbitrary file overwrite v ...)
+ {DSA-6594-1}
- python-git 3.1.61-1 (bug #1144344)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-fjr4-x663-mwxc
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/1d51b891d7f236044a6aa17498ec682b63dad6e6 (3.1.54)
CVE-2026-73623 (GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_ ...)
+ {DSA-6594-1}
- python-git 3.1.61-1 (bug #1144344)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-6p8h-3wgx-97gf
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/ffcb5359e87619f4fe4a70a4aff5f08c5580ba97 (3.1.54)
CVE-2026-73622 (GitPython before 3.1.55 fails to disable environment variable expansio ...)
+ {DSA-6594-1}
- python-git 3.1.61-1 (bug #1144344)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-94p4-4cq8-9g67
NOTE: Distinct but releated to CVE-2026-67322
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/863417457a0633db7ea5aed4fd01e0b291a41162 (3.1.55)
CVE-2026-73621 (GitPython before 3.1.56 contains an argument injection vulnerability i ...)
+ {DSA-6594-1}
- python-git 3.1.61-1 (bug #1144344)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-p538-c434-8v24
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/38553b6fddc7f6a667cdb45a6762343a08fc72b2 (3.1.56)
CVE-2026-73620 (GitPython before 3.1.57 fails to guard git option forwarding in IndexF ...)
+ {DSA-6594-1}
- python-git 3.1.61-1 (bug #1144344)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-3f7w-8rr8-f37f
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/3af0c2516c5e18c829da30338614688f6b69b49c (3.1.57)
CVE-2026-73619 (GitPython before 3.1.57 contains an incomplete denylist in the unsafe_ ...)
+ {DSA-6594-1}
- python-git 3.1.61-1 (bug #1144344)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-539m-9xh6-q6rr
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/7a4f5dcb7bf3cbcbf6e438017efcdfe0bc0d36ca (3.1.57)
@@ -120345,6 +121217,7 @@ CVE-2026-69151 (Angular is a development platform for building mobile and deskto
CVE-2026-69149 (Angular is a development platform for building mobile and desktop web ...)
- angular.js <unfixed>
CVE-2026-69097 (GitPython before 3.1.53 fails to properly escape section names in git ...)
+ {DSA-6594-1}
- python-git 3.1.61-1 (bug #1143602)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-3rp5-jjmw-4wv2
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/1ed1b924f4e2d2ee7bab296df77b978af21853f1 (3.1.53)
@@ -121041,23 +121914,28 @@ CVE-2026-67328 (@better-auth/sso versions before 1.6.21 contain multiple authent
CVE-2026-67327 (better-auth versions >= 1.1.3 and < 1.6.22 (and pre-release versions > ...)
NOT-FOR-US: Better Auth
CVE-2026-67326 (GitPython before 3.1.50 fails to validate newline characters in the se ...)
+ {DSA-6594-1}
- python-git 3.1.50-1
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-mv93-w799-cj2w
NOTE: https://github.com/gitpython-developers/GitPython/commit/54538428f79b0c91ba52cda5229856a6edf7ac06 (3.1.50)
CVE-2026-67325 (GitPython before 3.1.51 contains an incomplete command injection block ...)
+ {DSA-6594-1}
- python-git 3.1.61-1 (bug #1143454)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-2f96-g7mh-g2hx
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/181e8ede7543dbbdcee92756cea260f675316c63 (3.1.51)
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/56806080c1348749b07daa4a2024ce47b3cad285 (3.1.51)
CVE-2026-67324 (GitPython 3.1.50 fails to recognize joined short-option forms such as ...)
+ {DSA-6594-1}
- python-git 3.1.61-1 (bug #1143454)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-v396-v7q4-x2qj
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/2ab051697940144545a14d2f4a639c6409c3187f (3.1.51)
CVE-2026-67323 (GitPython before 3.1.51 fails to guard against dangerous Git options p ...)
+ {DSA-6594-1}
- python-git 3.1.61-1 (bug #1143454)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-956x-8gvw-wg5v
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/701ce32fe5ba8cb622c0e0342a376a6beb47d738 (3.1.51)
CVE-2026-67322 (GitPython before 3.1.52 is vulnerable to environment-variable exfiltra ...)
+ {DSA-6594-1}
- python-git 3.1.61-1 (bug #1143454)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rwj8-pgh3-r573
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/8ac5a30519b6f4af85398b9b9d7064ff4d452da2 (3.1.52)
@@ -122640,7 +123518,7 @@ CVE-2026-67244 (A format string vulnerability was found in the Notification OAut
CVE-2026-65975 (Pydantic AI is a Python agent framework for building applications and ...)
NOT-FOR-US: Pydantic AI
CVE-2026-64685 (ImageMagick is free and open-source software used for editing and mani ...)
- {DLA-4858-1}
+ {DSA-6593-1 DLA-4858-1}
- imagemagick 8:7.1.2.27+dfsg1-1
[bullseye] - imagemagick <postponed> (minor issue)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7rgw-xg25-prjm
@@ -122653,13 +123531,14 @@ CVE-2026-63119 (MCP Ruby SDK is the official Ruby SDK for Model Context Protocol
CVE-2026-63118 (MCP Ruby SDK is the official Ruby SDK for Model Context Protocol serve ...)
NOT-FOR-US: MCP Ruby SDK
CVE-2026-62946 (ImageMagick is free and open-source software used for editing and mani ...)
- {DLA-4858-1}
+ {DSA-6593-1 DLA-4858-1}
- imagemagick 8:7.1.2.27+dfsg1-1
[bullseye] - imagemagick <postponed> (minor issue)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h22j-f9xw-xjjm
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/538ad18f3a421d1dd9629baa747eebc137c32b67 (7.1.2-27)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/8018a5c3214ca9bf11a86c2816833dee920b1340 (6.9.13-52)
CVE-2026-62363 (ImageMagick is free and open-source software used for editing and mani ...)
+ {DSA-6593-1}
- imagemagick 8:7.1.2.27+dfsg1-1
[bookworm] - imagemagick <not-affected> (vulnerable code introduced later)
[bullseye] - imagemagick <not-affected> (vulnerable code introduced later)
@@ -122668,7 +123547,7 @@ CVE-2026-62363 (ImageMagick is free and open-source software used for editing an
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/0bbf7e48f5dd0ef540d3ae1ae8dfc6cd036fb640 (7.1.2-27)
NOTE: Function introduced by: https://github.com/ImageMagick/ImageMagick/commit/1c5e6e1b80dacc6c7410ae464da440e6ed3ca5bc (7.1.0-20)
CVE-2026-62343 (ImageMagick is free and open-source software used for editing and mani ...)
- {DLA-4858-1}
+ {DSA-6593-1 DLA-4858-1}
- imagemagick 8:7.1.2.26+dfsg1-1
[bullseye] - imagemagick <postponed> (minor issue)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f5m7-cqgw-8hm7
@@ -143848,7 +144727,7 @@ CVE-2026-15374 (A flaw has been found in Eleveo Call Recording Software 9.7.0. T
NOT-FOR-US: Eleveo Call Recording Software
CVE-2026-15373 (A vulnerability was detected in Eleveo Call Recording Software 9.7.0. ...)
NOT-FOR-US: Eleveo Call Recording Software
-CVE-2026-15146 (GNU Wget does not validate the IP address provided by an FTP PASV resp ...)
+CVE-2026-15146 (GNU Wget versions < 1.25.0+4f85853f64 do not validate the IP address p ...)
- wget 1.25.0-3 (bug #1142284)
[trixie] - wget <no-dsa> (Minor issue)
[bookworm] - wget <postponed> (Minor issue)
@@ -191393,12 +192272,14 @@ CVE-2026-44264 (Weblate is a web based localization tool. Prior to version 5.17.
CVE-2026-44263 (Weblate is a web based localization tool. Prior to version 5.17.1, the ...)
- weblate <itp> (bug #745661)
CVE-2026-44244 (GitPython is a python library used to interact with Git repositories. ...)
+ {DSA-6594-1}
- python-git 3.1.50-1
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-v87r-6q3f-2j67
NOTE: https://github.com/gitpython-developers/GitPython/pull/2137
NOTE: https://github.com/gitpython-developers/GitPython/commit/c417af469f9aa3da8dfef78f996c0fb8c5d1f4c2 (3.1.49)
NOTE: https://github.com/gitpython-developers/GitPython/commit/8e24503b42c1d63dd98e8b2e6a2f655bdd0821e3 (3.1.49)
CVE-2026-44243 (GitPython is a python library used to interact with Git repositories. ...)
+ {DSA-6594-1}
- python-git 3.1.50-1
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-7545-fcxq-7j24
NOTE: https://github.com/gitpython-developers/GitPython/pull/2134
@@ -197576,10 +198457,12 @@ CVE-2026-23773 (Dell Disk Library for Mainframe, version(s) DLm 8700/2700 contai
CVE-2026-21023 (Insufficient verification of data authenticity in PackageManagerServic ...)
NOT-FOR-US: Samsung Mobile
CVE-2026-42215 (GitPython is a python library used to interact with Git repositories. ...)
+ {DSA-6594-1}
- python-git 3.1.50-1 (bug #1135349)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rpm5-65cw-6hj4
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/0f68db0710f9125762fca5dbc2328593537ae923 (3.1.47)
CVE-2026-42284 (GitPython is a python library used to interact with Git repositories. ...)
+ {DSA-6594-1}
- python-git 3.1.50-1 (bug #1135350)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-x2qx-6953-8485
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/pull/2130
@@ -205043,7 +205926,7 @@ CVE-2026-4109 (The Eventin \u2013 Events Calendar, Event Booking, Ticket & Regis
NOT-FOR-US: WordPress plugin
CVE-2026-39815 (A improper neutralization of special elements used in an sql command ( ...)
NOT-FOR-US: Fortinet
-CVE-2026-39814 (A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 thr ...)
+CVE-2026-39814 (Multiple Relative Path Traversal vulnerabilities [CWE-23] vulnerabilit ...)
NOT-FOR-US: Fortinet
CVE-2026-39813 (A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox ...)
NOT-FOR-US: Fortinet
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/043ca3511693412987f46f4261bb40975f10f3e6
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/043ca3511693412987f46f4261bb40975f10f3e6
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261029/92b07a23/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list