[Git][security-tracker-team/security-tracker][master] Add new go-attestation issue

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6593bad5 by Salvatore Bonaccorso at 2026-09-12T11:33:28+02:00
Add new go-attestation issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4951,7 +4951,10 @@ CVE-2026-19479 (Adobe Experience Manager is affected by a DOM-based Cross-Site S
 CVE-2026-19232 (Adobe Experience Manager is affected by an Incorrect Authorization vul ...)
 	NOT-FOR-US: Adobe
 CVE-2026-19201 (An uncontrolled recursion vulnerability in the Windows SIPA event log  ...)
-	TODO: check
+	- golang-github-google-go-attestation <unfixed>
+	NOTE: https://github.com/google/go-attestation/security/advisories/GHSA-hcm6-rjfh-f25p
+	NOTE: https://github.com/google/go-attestation/pull/506
+	TODO: check, GHSA not yet public, maybe Windows specific
 CVE-2026-18042 (The WP Travel  WordPress plugin before 12.0.2 does not verify that the ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-17553 (The WP EasyCart plugin for WordPress is vulnerable to privilege escala ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6593bad57cbfab422d6296660f06d73e78b65247

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6593bad57cbfab422d6296660f06d73e78b65247
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260912/901406b6/attachment.htm>