[Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sun Sep 27 20:14:47 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
268244c7 by security tracker role at 2026-09-27T19:14:30+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,111 @@
+CVE-2026-97165 (Joomla Extension - svenbluege.de - Reflected XSS and open redirect in ...)
+ TODO: check
+CVE-2026-97164 (Joomla Extension - svenbluege.de - Authenticated arbitrary path deleti ...)
+ TODO: check
+CVE-2026-94419 (Without NO_SESSION_CACHE_REF, wolfSSL_get_session() does not return a ...)
+ TODO: check
+CVE-2026-94418 (Under WOLFSSL_SMALL_CERT_VERIFY, ProcessPeerCertParse() runs the certi ...)
+ TODO: check
+CVE-2026-94417 (When an application enables both OCSP and CRL revocation checking on o ...)
+ TODO: check
+CVE-2026-93304 (A (D)TLS 1.2 client can accept a ChangeCipherSpec message before it ha ...)
+ TODO: check
+CVE-2026-93302 (MatchTrustedPeer ignores the public key used, leading to forged CA clo ...)
+ TODO: check
+CVE-2026-89136 (When using RPK (Raw Public Key), the client side of a TLS 1.2, 1.3 and ...)
+ TODO: check
+CVE-2026-89135 (A failed X509_verify_cert call permanently plants an unverified attack ...)
+ TODO: check
+CVE-2026-89134 (A certificate with no dNSName SAN but another SAN type present (e.g. r ...)
+ TODO: check
+CVE-2026-89133 (wolfSSL versions 5.9.2 and earlier contain a flaw in the X.509 certifi ...)
+ TODO: check
+CVE-2026-89102 (In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side impleme ...)
+ TODO: check
+CVE-2026-88778 (Predictable exact value from previous values vulnerability in Citrix N ...)
+ TODO: check
+CVE-2026-88777 (Memory overflow vulnerability vulnerability in Citrix NetScaler ADC an ...)
+ TODO: check
+CVE-2026-88776 (Memory overflow vulnerability vulnerability in Citrix NetScaler ADC an ...)
+ TODO: check
+CVE-2026-88775 (Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetSc ...)
+ TODO: check
+CVE-2026-88774 (Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. T ...)
+ TODO: check
+CVE-2026-88773 (Inconsistent interpretation of HTTP requests ('HTTP Request/Response s ...)
+ TODO: check
+CVE-2026-88772 (Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. T ...)
+ TODO: check
+CVE-2026-88771 (Improper input validation vulnerability in Citrix NetScaler ADC and Ci ...)
+ TODO: check
+CVE-2026-15442 (In all builds that make use of (D)TLS, including default builds, there ...)
+ TODO: check
+CVE-2026-101061 (utcp-gql before 1.1.1 and utcp-websocket before 1.1.1 contain server-s ...)
+ TODO: check
+CVE-2026-101060 (python-utcp versions before 1.1.4 contain a server-side request forger ...)
+ TODO: check
+CVE-2026-101059 (utcp-http before 1.1.4 fails to validate the OAuth2 tokenUrl field fro ...)
+ TODO: check
+CVE-2026-101058 (python-utcp (pip package utcp-http) before 1.1.12 does not verify whet ...)
+ TODO: check
+CVE-2026-101057 (utcp-mcp (the MCP plugin of python-utcp) through 1.1.2 connects to the ...)
+ TODO: check
+CVE-2026-101056 (Cloudreve before 4.16.1 fails to revalidate share access when restorin ...)
+ TODO: check
+CVE-2026-101051 (Cloudreve before 4.16.1 fails to properly sanitize file paths returned ...)
+ TODO: check
+CVE-2026-101050 (Heym before 0.0.53 fails to verify the X-Telegram-Bot-Api-Secret-Token ...)
+ TODO: check
+CVE-2026-101049 (Heym before 0.0.53 fails to verify Slack request signatures when trigg ...)
+ TODO: check
+CVE-2026-101048 (Cloudreve before 4.17.0 registers the administrative node test endpoin ...)
+ TODO: check
+CVE-2026-101047 (Fleet before 4.87.0 does not protect the two endpoints that serve in-h ...)
+ TODO: check
+CVE-2026-101046 (Fleet before 4.89.0 contains an SQL injection vulnerability in the act ...)
+ TODO: check
+CVE-2026-101045 (Fleet-maintained app install and uninstall scripts for macOS are gener ...)
+ TODO: check
+CVE-2026-101044 (pacquet, the Rust package-manager component shipped in the pnpm npm pa ...)
+ TODO: check
+CVE-2026-101043 (pnpm versions 11.0.0 before 11.11.0 and 10.7.0 before 10.34.5 expand $ ...)
+ TODO: check
+CVE-2026-101042 (Parse Server is an open-source backend server. In versions >= 9.0.0 < ...)
+ TODO: check
+CVE-2026-101041 (The account recovery (password reset) functionality in the vulnerabili ...)
+ TODO: check
+CVE-2026-101033 (KitchenOwl through 0.7.10 fails to verify that category IDs belong to ...)
+ TODO: check
+CVE-2026-101032 (navi through 2.24.0 fails to properly escape cheatsheet variable value ...)
+ TODO: check
+CVE-2026-100875 (A vulnerability has been found in mathurvishal CloudClassroom-PHP-Proj ...)
+ TODO: check
+CVE-2026-100874 (A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to ...)
+ TODO: check
+CVE-2026-100873 (A vulnerability was detected in mathurvishal CloudClassroom-PHP-Projec ...)
+ TODO: check
+CVE-2026-100872 (Sylius versions before 2.1.16 and 2.2.9 fail to validate payment amoun ...)
+ TODO: check
+CVE-2026-100871 (Sylius versions before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 fa ...)
+ TODO: check
+CVE-2026-100870 (Sylius versions before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 bu ...)
+ TODO: check
+CVE-2026-100869 (Sylius versions before 2.1.16 and 2.2.9 fail to restrict payment reque ...)
+ TODO: check
+CVE-2026-100868 (Penpot before 2.18.0 binds the MCP server plugin WebSocket bridge to a ...)
+ TODO: check
+CVE-2026-100867 (spaceship-prompt through 4.22.5 fails to sanitize control characters f ...)
+ TODO: check
+CVE-2026-100866 (onefetch through 2.28.1 writes repository information field values to ...)
+ TODO: check
+CVE-2026-100749 (Joomla Extension - svenbluege.de - CSRF in backend cleanup actions in ...)
+ TODO: check
+CVE-2026-100748 (Joomla Extension - svenbluege.de - CSRF in various cart actions in Eve ...)
+ TODO: check
+CVE-2026-100747 (Joomla Extension - svenbluege.de - CSRF in image upload in Event Galle ...)
+ TODO: check
+CVE-2026-100741 (Eval injection in the JScript event-script dispatcher in Progressive R ...)
+ TODO: check
CVE-2026-XXXX [Infinite loops and heap OOB read when parsing malformed ASF headers]
- libmms <unfixed> (bug #1149047)
CVE-2026-XXXX [unbounded list indices from a Word document reach a wild pointer dereference in wvAssembleSimplePAP]
@@ -65,7 +173,7 @@ CVE-2026-72668 (Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441) i
NOT-FOR-US: Elastic
CVE-2026-72662 (Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana c ...)
NOT-FOR-US: Elastic
-CVE-2026-100865 (Heym before 0.0.53 contains multiple independent vulnerabilities. (1) ...)
+CVE-2026-100865 (Heym before 0.0.53 evaluates workflow condition expressions using Pyth ...)
NOT-FOR-US: Heym
CVE-2026-100864 (heym before 0.0.91 contains a sandbox escape vulnerability in the expr ...)
NOT-FOR-US: Heym
@@ -91,7 +199,7 @@ CVE-2026-100854 (AzuraCast before 0.23.6 lacks RequireInternalConnection middlew
NOT-FOR-US: AzuraCast
CVE-2026-100853 (In AzuraCast before 0.23.8, the public On-Demand download endpoint fai ...)
NOT-FOR-US: AzuraCast
-CVE-2026-100852 (AzuraCast through 0.23.x contains a command injection vulnerability in ...)
+CVE-2026-100852 (AzuraCast before 0.23.8 contains a command injection vulnerability in ...)
NOT-FOR-US: AzuraCast
CVE-2026-100851 (AzuraCast before 0.23.8 contains a broken access control vulnerability ...)
NOT-FOR-US: AzuraCast
@@ -2951,18 +3059,20 @@ CVE-2026-XXXX [GHSA-27q7-qwhm-c34p]
[bookworm] - lxd <end-of-life> (EOL in bookworm LTS)
NOTE: https://github.com/lxc/incus/security/advisories/GHSA-27q7-qwhm-c34p
CVE-2026-92288 (Lemonldap::NG::Portal versions from 2.20.0 before 2.21.6, from 2.22.0 ...)
+ {DSA-6520-1}
- lemonldap-ng 2.23.4+ds-1
[bookworm] - lemonldap-ng <not-affected> (Vulnerable code introduced later)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/43830141/
NOTE: https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/work_items/3719
NOTE: https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/work_items/3721
CVE-2026-92289 (Lemonldap::NG::Portal versions from 2.23.0 before 2.23.4 for Perl allo ...)
+ {DSA-6520-1}
- lemonldap-ng 2.23.4+ds-1
[bookworm] - lemonldap-ng <not-affected> (Vulnerable code introduced later)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/43830168/
NOTE: https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/work_items/3719
CVE-2026-95811 (Lemonldap::NG::Handler versions from 2.0.0 before 2.16.10, from 2.17.0 ...)
- {DLA-4797-1}
+ {DSA-6520-1 DLA-4797-1}
- lemonldap-ng 2.23.4+ds-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/43833452/
NOTE: https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/work_items/3723
@@ -72434,6 +72544,7 @@ CVE-2026-58045 (A flaw in Node.js allows a spoofed `TypedArray` `byteLength` to
NOTE: https://nodejs.org/en/blog/vulnerability/july-2026-security-releases#nodezlib-sync-apis-can-crash-on-spoofed-typedarray-length-cve-2026-58045---medium
NOTE: Fixed by: https://github.com/nodejs/node/commit/0d072480c3dbbad6db8723e39786321646989343 (v22.23.2)
CVE-2026-58042 (A flaw in Node.js can cause dns.resolveAny() Aborts the Node.js Proces ...)
+ {DSA-6517-1}
- nodejs 24.19.0+dfsg+~cs24.13.3-1
NOTE: https://nodejs.org/en/blog/vulnerability/july-2026-security-releases#dnsresolveany-can-abort-on-dns-responses-with-many-a-records-cve-2026-58042---medium
NOTE: Fixed by: https://github.com/nodejs/node/commit/22efc051a3c3b3bbddbb3cb06ce1ca5775923c01 (v22.23.2)
@@ -72561,6 +72672,7 @@ CVE-2026-58066 (Rocket.Chat's SAML SSO before versions 8.7.0, 8.6.1, 8.5.2, 8.4.
CVE-2026-58046 (Improper neutralization in the Plesk XML-RPC API allows a remote authe ...)
NOT-FOR-US: Plesk
CVE-2026-58043 (A flaw in Node.js Permission Model enforcement can over-grant filesyst ...)
+ {DSA-6517-1}
- nodejs 24.19.0+dfsg+~cs24.13.3-1
[bookworm] - nodejs <not-affected> (Permission Model is a Node 20+ feature)
[bullseye] - nodejs <not-affected> (Permission Model is a Node 20+ feature)
@@ -99292,35 +99404,43 @@ CVE-2026-55223 (c3p0 is a JDBC Connection pooling library. In versions prior to
NOTE: https://github.com/swaldman/c3p0/commit/7b022c4b6694dabc6204254dc917af9c38f2cb27 (v0.14.0)
TODO: check if that is an issue with the packaged version
CVE-2026-54903 (Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as ...)
+ {DSA-6521-1}
- ruby-oj 3.17.3-1
NOTE: https://github.com/ohler55/oj/security/advisories/GHSA-475m-ph3x-64gp
NOTE: https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7 (v3.17.3)
CVE-2026-54902 (Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as ...)
+ {DSA-6521-1}
- ruby-oj 3.17.6-2
NOTE: https://github.com/ohler55/oj/security/advisories/GHSA-m578-w5vf-rfcm
NOTE: https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7 (v3.17.3)
NOTE: Followup: https://github.com/ohler55/oj/issues/1109
CVE-2026-54901 (Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as ...)
+ {DSA-6521-1}
- ruby-oj 3.17.3-1
NOTE: https://github.com/ohler55/oj/security/advisories/GHSA-vwm4-62gf-x745
NOTE: https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7 (v3.17.3)
CVE-2026-54900 (Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as ...)
+ {DSA-6521-1}
- ruby-oj 3.17.3-1
NOTE: https://github.com/ohler55/oj/security/advisories/GHSA-9cv6-qcjw-4grx
NOTE: https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7 (v3.17.3)
CVE-2026-54899 (Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as ...)
+ {DSA-6521-1}
- ruby-oj 3.17.3-1
NOTE: https://github.com/ohler55/oj/security/advisories/GHSA-2cw7-v8ff-p88r
NOTE: https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7 (v3.17.3)
CVE-2026-54898 (Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as ...)
+ {DSA-6521-1}
- ruby-oj 3.17.3-1
NOTE: https://github.com/ohler55/oj/security/advisories/GHSA-q2gm-54r6-8fwm
NOTE: https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7 (v3.17.3)
CVE-2026-54897 (Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as ...)
+ {DSA-6521-1}
- ruby-oj 3.17.3-1
NOTE: https://github.com/ohler55/oj/security/advisories/GHSA-9ppp-w3g4-fh4q
NOTE: https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7 (v3.17.3)
CVE-2026-54896 (Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as ...)
+ {DSA-6521-1}
- ruby-oj 3.17.3-1
NOTE: https://github.com/ohler55/oj/security/advisories/GHSA-35w3-pjm6-wj95
NOTE: https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7 (v3.17.3)
@@ -99336,14 +99456,17 @@ CVE-2026-54673 (electron-updater allows for automatic updates for Electron apps.
CVE-2026-54672 (electron-updater allows for automatic updates for Electron apps. Prior ...)
NOT-FOR-US: electron-updater
CVE-2026-54592 (Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as ...)
+ {DSA-6521-1}
- ruby-oj 3.17.3-1
NOTE: https://github.com/ohler55/oj/security/advisories/GHSA-3m6q-jj5j-38c9
NOTE: https://github.com/ohler55/oj/commit/bbde91a679728f94c4492ebc3683f4fa3309049f (v3.17.3)
CVE-2026-54502 (Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as ...)
+ {DSA-6521-1}
- ruby-oj 3.17.3-1
NOTE: https://github.com/ohler55/oj/security/advisories/GHSA-3v45-f3vh-wg7m
NOTE: https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7 (v3.17.3)
CVE-2026-54500 (Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as ...)
+ {DSA-6521-1}
- ruby-oj 3.17.3-1
NOTE: https://github.com/ohler55/oj/security/advisories/GHSA-fm7p-mprw-wjm9
NOTE: https://github.com/ohler55/oj/commit/bbde91a679728f94c4492ebc3683f4fa3309049f (v3.17.3)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/268244c73f1887853d843f319bb85249359b85ff
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/268244c73f1887853d843f319bb85249359b85ff
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260927/b23451e5/attachment.htm>
More information about the debian-security-tracker-commits
mailing list