Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a85b5e02 by Salvatore Bonaccorso at 2026-04-03T10:39:40+02:00
Add two new CVEs in shynet, itp'ed
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -20,9 +20,9 @@ CVE-2026-35549 (An issue was discovered in MariaDB Server
before 11.4.10, 11.5.x
[bookworm] - mariadb <not-affected> (Vulnerable code not present)
NOTE: https://jira.mariadb.org/browse/MDEV-38365
CVE-2026-35508 (Shynet before 0.14.0 allows XSS in urldisplay and iconify
template fil ...)
- TODO: check
+ - shynet <itp> (bug #1087598)
CVE-2026-35507 (Shynet before 0.14.0 allows Host header injection in the
password rese ...)
- TODO: check
+ - shynet <itp> (bug #1087598)
CVE-2026-35467 (The stored API keys in temporary browser client is not marked
as prote ...)
TODO: check
CVE-2026-35466 (XSS vulnerability in cveInterface.js allows for inject HTML to
be pass ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a85b5e022b4dab9ca9b9d957e1e4501e88fd04d7
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a85b5e022b4dab9ca9b9d957e1e4501e88fd04d7
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
