[Git][security-tracker-team/security-tracker][master] Add new kitty issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b5af92f6 by Salvatore Bonaccorso at 2026-09-25T22:03:54+02:00
Add new kitty issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -127,11 +127,15 @@ CVE-2026-95866 (The User Profile Builder \u2013 Beautiful User Registration Form
 CVE-2026-95864 (The Themify Builder plugin for WordPress is vulnerable to Stored Cross ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-95835 (Missing Authorization in the askpass escape code handler in kitty from ...)
-	TODO: check
+	- kitty <unfixed>
+	NOTE: Fixed by: https://github.com/kovidgoyal/kitty/commit/3281919056c442e4ba6f5abed7ee2c5130de31ff (v0.49.0)
 CVE-2026-95834 (Use After Free in the drag source path of the drag and drop protocol i ...)
-	TODO: check
+	- kitty <unfixed>
+	NOTE: Fixed by: https://github.com/kovidgoyal/kitty/commit/b54bfbb4f85f992edca9b04f5c0c2612454eec23 (v0.49.0)
 CVE-2026-95832 (Improper Neutralization of Special Elements in Output Used by a Downst ...)
-	TODO: check
+	- kitty <unfixed>
+	NOTE: Fixed by: https://github.com/kovidgoyal/kitty/commit/03fbdad855490470233954bc810e517027e5e640 (0.49.0)
+	NOTE: Fixed by: https://github.com/kovidgoyal/kitty/commit/57bb144d96c0f9d48a2b0a6d43c9a23d2a091cbf (0.49.0)
 CVE-2026-95699 (Prior to 9/18/2026, the iSteamX mobile application's AWS policy could  ...)
 	NOT-FOR-US: iSteamX mobile application
 CVE-2026-94573 (The Repeater Fields for Elementor Forms plugin for WordPress is vulner ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b5af92f667c143cdbb9e435ab466e45e8e4dc274

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b5af92f667c143cdbb9e435ab466e45e8e4dc274
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260925/990f88e8/attachment.htm>