[Git][security-tracker-team/security-tracker][master] Add CVE-2026-118590/nibabel

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ae3628e0 by Salvatore Bonaccorso at 2026-10-30T05:54:47+01:00
Add CVE-2026-118590/nibabel

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1317,7 +1317,9 @@ CVE-2026-118650 (Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, a global
 	NOTE: Fixed by: https://github.com/labstack/echo/commit/b838391e2eade87ae7e5a09d7bb5087bec271ec1 (v4.16.0)
 	NOTE: Fixed by: https://github.com/labstack/echo/commit/fc410094b2f3415cf2bf5204082137b205bfd5af (v5.4.0)
 CVE-2026-118590 (A security vulnerability has been detected in nipy nibabel up to 5.4.2 ...)
-	TODO: check
+	- nibabel <unfixed>
+	NOTE: https://github.com/nipy/nibabel/issues/1566
+	NOTE: https://github.com/nipy/nibabel/pull/1587
 CVE-2026-118589 (A weakness has been identified in nschloe meshio up to 5.3.5. Impacted ...)
 	TODO: check
 CVE-2026-118586 (A security flaw has been discovered in dfm feedfinder2 up to 0.0.4. Th ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ae3628e09a61cb4445284fbc55f5e256ff91bfea

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ae3628e09a61cb4445284fbc55f5e256ff91bfea
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261030/78e145ef/attachment.htm>