[Git][security-tracker-team/security-tracker][master] new dasel issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a455a10c by Moritz Muehlenhoff at 2026-09-24T00:32:32+02:00
new dasel issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2129,7 +2129,9 @@ CVE-2026-63116 (deepstream is a server that allows clients and backend services
 CVE-2026-62987 (Fabio is an HTTP(S) and TCP router for deploying applications managed  ...)
 	NOT-FOR-US: Fabio
 CVE-2026-62866 (Dasel is a command-line tool and library for querying, modifying, and  ...)
-	TODO: check
+	- dasel 3.11.2-1
+	NOTE: https://github.com/TomWright/dasel/security/advisories/GHSA-65gg-g7rw-6cpc
+	NOTE: https://github.com/TomWright/dasel/commit/eee03aec28d4a33d6138098d065b7b37b85e3c55 (v3.11.2)
 CVE-2026-62371 (KubeEdge is an open source system for extending native containerized a ...)
 	NOT-FOR-US: KubeEdge
 CVE-2026-62370 (KubeEdge is an open source system for extending native containerized a ...)
@@ -2187,7 +2189,9 @@ CVE-2026-59815 (Joplin is an open source note-taking and to-do application that
 CVE-2026-59814 (Joplin is an open source note-taking and to-do application that organi ...)
 	- joplin <itp> (bug #931306)
 CVE-2026-59168 (Dasel is a command-line tool and library for querying, modifying, and  ...)
-	TODO: check
+	- dasel 3.11.2-1
+	NOTE: https://github.com/TomWright/dasel/security/advisories/GHSA-cqxr-jxr2-85pq
+	NOTE: https://github.com/TomWright/dasel/commit/4c91d0d02dc59ce8404709b1bfed7a6fabe62f68 (v3.11.1)
 CVE-2026-58504 (draw.io is a configurable diagramming and whiteboarding application. P ...)
 	NOT-FOR-US: draw.io
 CVE-2026-58491 (Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a455a10ce8c66b59f7b243598b823e9b0cb00b3d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a455a10ce8c66b59f7b243598b823e9b0cb00b3d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260923/f706464b/attachment.htm>