Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e149c27a by Moritz Muehlenhoff at 2026-02-25T22:47:54+01:00
new gitlab issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,17 @@
+CVE-2026-1747
+ - gitlab <not-affected> (Specific to EE)
+CVE-2026-1725
+ - gitlab <not-affected> (Vulnerable code introduced later)
+CVE-2026-2845
+ - gitlab <unfixed>
+CVE-2026-1388
+ - gitlab <unfixed>
+CVE-2026-1662
+ - gitlab <unfixed>
+CVE-2025-14511
+ - gitlab <unfixed>
+CVE-2026-0752
+ - gitlab <unfixed>
CVE-2026-3221 (Sensitive user account information is not encrypted in the
database i ...)
NOT-FOR-US: Devolutions
CVE-2026-3206 (Improper Resource Shutdown or Release vulnerability in KrakenD,
SLU Kr ...)
@@ -203,13 +217,13 @@ CVE-2025-62878 (A malicious user can manipulate the
parameters.pathPatternto cre
CVE-2025-50180 (esm.sh is a no-build content delivery network (CDN) for web
developmen ...)
TODO: check
CVE-2025-3525 (GitLab has remediated an issue in GitLab CE/EE affecting all
versions ...)
- TODO: check
+ - gitlab <unfixed>
CVE-2025-1242 (The administrative credentials can be extracted through
application AP ...)
TODO: check
CVE-2025-14742 (The WP Recipe Maker plugin for WordPress is vulnerable to
unauthorized ...)
NOT-FOR-US: WordPress plugin
CVE-2025-14103 (GitLab has remediated an issue in GitLab CE/EE affecting all
versions ...)
- TODO: check
+ - gitlab <not-affected> (Vulnerable code introduced later)
CVE-2026-27015
- freerdp3 3.23.0+dfsg-1
- freerdp2 <removed>
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e149c27afd97dd66e7875ee1eb260e3a7eddbeb8
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e149c27afd97dd66e7875ee1eb260e3a7eddbeb8
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits