Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
1f239791 by Salvatore Bonaccorso at 2026-04-02T09:02:37+02:00
Add two new teampass issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -424,9 +424,9 @@ CVE-2026-3191 (The Minify HTML plugin for WordPress is
vulnerable to Cross-Site
CVE-2026-3139 (The User Profile Builder \u2013 Beautiful User Registration
Forms, Use ...)
NOT-FOR-US: WordPress plugin
CVE-2026-3107 (Stored Cross-Site Scripting (XSS) in Teampass versions prior to
3.1.5. ...)
- TODO: check
+ - teampass <itp> (bug #730180)
CVE-2026-3106 (Blind Cross-Site Scripting (XSS) in Teampass, versions prior to
3.1.5. ...)
- TODO: check
+ - teampass <itp> (bug #730180)
CVE-2026-35057 (XenForo before 2.3.10 and before 2.2.19 is vulnerable to
stored cross- ...)
NOT-FOR-US: XenForo
CVE-2026-35056 (XenForo before 2.3.9 and before 2.2.18 allows remote code
execution (R ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1f239791667760ec06a10288fbffebfa21447d9f
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1f239791667760ec06a10288fbffebfa21447d9f
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
