[Git][security-tracker-team/security-tracker][master] jabref n/a

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ea743833 by Moritz Muehlenhoff at 2026-09-21T11:23:14+02:00
jabref n/a

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2007,7 +2007,10 @@ CVE-2026-53555 (SQLBot is an intelligent Text-to-SQL system based on large langu
 CVE-2026-53554 (SQLBot is an intelligent Text-to-SQL system based on large language mo ...)
 	NOT-FOR-US: SQLBot
 CVE-2026-53534 (JabRef is a desktop application for managing BibTeX and BibLaTeX libra ...)
-	TODO: check
+	- jabref <not-affected> (Vulnerable code introduced later)
+	NOTE: https://github.com/JabRef/jabref/security/advisories/GHSA-m42c-cw93-p629
+	NOTE: Fixed by: https://github.com/JabRef/jabref/commit/b8663fe58e6c87c3927cdb4eeb1f6934d7c3f1d2 (v6.0-alpha.6)
+	NOTE: Introduced by: https://github.com/JabRef/jabref/commit/7959b1686b82a24e9fbce893c90064357f8f6b75 (v6.0-alpha.3)
 CVE-2026-52483 (The ping diagnostics and other similar functions of the MitraStar GPT- ...)
 	NOT-FOR-US: MitraStar GPT-2741GNAC-N2-SV router
 CVE-2026-50291 (OpenImageIO is a toolset for reading, writing, and manipulating image  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ea743833e60d146959ddd207413aed320eba48af

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ea743833e60d146959ddd207413aed320eba48af
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260921/7e3f1518/attachment-0001.htm>