[Git][security-tracker-team/security-tracker][master] Add new misp issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ef32f516 by Salvatore Bonaccorso at 2026-09-30T23:03:43+02:00
Add new misp issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -704,11 +704,11 @@ CVE-2026-103396 (bbs-go through 4.4.6 contains a permission bypass vulnerability
 CVE-2026-103395 (LightLLM through 1.2.0 visual_only deployments expose an unauthenticat ...)
 	NOT-FOR-US: LightLLM
 CVE-2026-103389 (MISP contains a stored cross-site scripting (XSS) vulnerability in the ...)
-	TODO: check
+	- misp <itp> (bug #1144317)
 CVE-2026-103388 (MISP renders the source field of a Galaxy Cluster as a clickable hyper ...)
-	TODO: check
+	- misp <itp> (bug #1144317)
 CVE-2026-103321 (MISP contains a stored cross-site script (XSS) vulnerability in the ev ...)
-	TODO: check
+	- misp <itp> (bug #1144317)
 CVE-2026-103270 (LightLLM through 1.2.0 mounts reinforcement learning control routes on ...)
 	NOT-FOR-US: LightLLM
 CVE-2026-103243 (LightLLM through 1.2.0 fails to validate image_url and audio_url param ...)
@@ -718,11 +718,11 @@ CVE-2026-103242 (A heap-based buffer overflow flaw was found in rpm. RPMTAG_FILE
 CVE-2026-103241 (A flaw has been found in vllm-project vLLM up to 0.26.0. This vulnerab ...)
 	TODO: check
 CVE-2026-103239 (MISP contains a privilege escalation vulnerability in the tag collecti ...)
-	TODO: check
+	- misp <itp> (bug #1144317)
 CVE-2026-103237 (MISP contains an improper input validation vulnerability in its ORM sa ...)
-	TODO: check
+	- misp <itp> (bug #1144317)
 CVE-2026-103235 (MISP contains a mass assignment vulnerability in the event delegation  ...)
-	TODO: check
+	- misp <itp> (bug #1144317)
 CVE-2026-103233 (A security vulnerability has been detected in AdithyaYelloju Restauran ...)
 	NOT-FOR-US: AdithyaYelloju Restaurant-Management-System
 CVE-2026-103232 (A weakness has been identified in AdithyaYelloju Restaurant-Management ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ef32f5167249e6732ef71bbedd2e3bdd0c7338e9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ef32f5167249e6732ef71bbedd2e3bdd0c7338e9
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260930/3df23f17/attachment-0001.htm>