[Git][security-tracker-team/security-tracker][master] Add CVE-2026-77528/python-autobahn

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d6922c90 by Salvatore Bonaccorso at 2026-09-19T10:12:36+02:00
Add CVE-2026-77528/python-autobahn

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -202,7 +202,10 @@ CVE-2026-77875 (The application protects access through its calculator-style vau
 CVE-2026-77820 (The WPComplete plugin for WordPress is vulnerable to Stored Cross-Site ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-77528 (Autobahn Python is a WebSocket and WAMP implementation for Python that ...)
-	TODO: check
+	- python-autobahn <unfixed>
+	NOTE: https://github.com/crossbario/autobahn-python/security/advisories/GHSA-hxp9-w8x3-p566
+	NOTE: https://github.com/crossbario/autobahn-python/pull/1916
+	NOTE: Fixed by: https://github.com/crossbario/autobahn-python/commit/77d323a30b09b1828ad8be2ce6344e056970e613 (v26.7.1)
 CVE-2026-76902 (CordysCRM is an open source AI-powered customer relationship managemen ...)
 	TODO: check
 CVE-2026-76901 (CordysCRM is an open source AI-powered customer relationship managemen ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d6922c9053c698204bf2af1d9229903c011e650b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d6922c9053c698204bf2af1d9229903c011e650b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260919/aa7db75e/attachment.htm>