[Git][security-tracker-team/security-tracker][master] Add CVE-2026-97209/elixir-lang

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
53f4f63a by Salvatore Bonaccorso at 2026-10-31T09:13:11+01:00
Add CVE-2026-97209/elixir-lang

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -359,7 +359,14 @@ CVE-2026-9239 (The Meow Gallery plugin for WordPress is vulnerable to Stored Cro
 CVE-2026-97638 (The Forminator Forms \u2013 Contact Form, Payment Form & Custom Form B ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-97209 (Insecure Temporary File vulnerability in Mix deps.partition in Elixir  ...)
-	TODO: check
+	- elixir-lang <unfixed>
+	[trixie] - elixir-lang <not-affected> (Vulnerable code introduced later)
+	[bookworm] - elixir-lang <not-affected> (Vulnerable code introduced later)
+	NOTE: https://github.com/elixir-lang/elixir/security/advisories/GHSA-96q6-xhwp-fc8q
+	NOTE: https://cna.erlef.org/cves/CVE-2026-97209.html
+	NOTE: https://osv.dev/vulnerability/EEF-CVE-2026-97209
+	NOTE: Introduced with: https://github.com/elixir-lang/elixir/commit/7f3d95b60c28ae3026a5c1bf943166391245bfd1 (v1.20.0-rc.4)
+	NOTE: Fixed by: https://github.com/elixir-lang/elixir/commit/55eb91220a1de14dc5aa27029d1f45b0f5832b2d (v1.20.5)
 CVE-2026-96894 (The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce plu ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-94175 (Unauthenticated Cross Site Scripting (XSS) in All In One Login <= 2.4. ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/53f4f63a7598bb3f232e21af0e7f2f8ad855d775

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/53f4f63a7598bb3f232e21af0e7f2f8ad855d775
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261031/2625c67b/attachment.htm>