[Git][security-tracker-team/security-tracker][master] new libfreemarker-java issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
05113b6f by Moritz Muehlenhoff at 2026-09-11T22:40:25+02:00
new libfreemarker-java issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1241,7 +1241,8 @@ CVE-2026-87011 (Open WebUI is an extensible, feature-rich, and user-friendly sel
 CVE-2026-85645 (The Form Maker by 10Web \u2013 Mobile-Friendly Drag & Drop Contact For ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-84939 (Path traversal vulnerability in Apache FreeMarker template loading mec ...)
-	TODO: check
+	- libfreemarker-java <unfixed>
+	NOTE: https://lists.apache.org/thread/hrd7o2ylwkkswdyhyzllgqt0f80kyd5y
 CVE-2026-84063 (BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted u ...)
 	NOT-FOR-US: BurgerEditor
 CVE-2026-84062 (BurgerEditor 3.0.0 through 3.4.0 contains an issue with authorization  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/05113b6f414d4a67a61498611417597f4c3e8405

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/05113b6f414d4a67a61498611417597f4c3e8405
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260911/362b3b65/attachment.htm>