[Git][security-tracker-team/security-tracker][master] new pistache issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f5b1f115 by Moritz Muehlenhoff at 2026-10-30T22:55:50+01:00
new pistache issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -69,7 +69,9 @@ CVE-2026-64860
 CVE-2026-64618 (Improper Neutralization of Special Elements used in an SQL Command ("S ...)
 	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-62303 (Pistache is a high-performance REST toolkit written in C++. From 0.0.5 ...)
-	TODO: check
+	- pistache <unfixed>
+	NOTE: https://github.com/pistacheio/pistache/security/advisories/GHSA-q474-pqcp-gqm5
+	NOTE: https://github.com/pistacheio/pistache/commit/935461352403696f3ca0dbb9a7de7d2609e7ce91
 CVE-2026-62298 (mouse07410/asn1c is an ASN.1 compiler. Prior to 1.2.5, `OPEN TYPE` dec ...)
 	TODO: check
 CVE-2026-62264 (PDF Reader MCP is a Model Context Protocol server for reading PDF docu ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f5b1f115ff7e2786c47967c9e09a4488303f67d7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f5b1f115ff7e2786c47967c9e09a4488303f67d7
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261030/e960f297/attachment.htm>