Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
80375169 by Salvatore Bonaccorso at 2026-05-05T14:05:41+02:00
Associate CVE-2026-6321 with node-ajv which provides node-fast-uri
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -78,7 +78,10 @@ CVE-2026-6499 (Incorrect Permission Assignment for Critical
Resource vulnerabili
CVE-2026-6418 (An issue was discovered in the Shared Account Synchronization
componen ...)
NOT-FOR-US: PaperCut
CVE-2026-6321 (fast-uri decoded percent-encoded path separators and dot
segments befo ...)
- NOT-FOR-US: Node fast-uri
+ - node-ajv <unfixed>
+ NOTE:
https://github.com/fastify/fast-uri/security/advisories/GHSA-q3j6-qgpj-74h6
+ NOTE: Fixed by:
https://github.com/fastify/fast-uri/commit/876ce79b662c3e5015e4e7dffe6f37752ad34f35
(v3.1.1)
+ NOTE: Embedded fast-uri used and provided as node-fast-uri
CVE-2026-6266 (A flaw was found in the AAP gateway. The user auto-link
strategy, intr ...)
NOT-FOR-US: Red Hat AAP gateway
CVE-2026-6255 (The Simple Owl Shortcodes plugin for WordPress is vulnerable to
Stored ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/80375169b4d76004656d3cfb43408d5f90b400d1
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/80375169b4d76004656d3cfb43408d5f90b400d1
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
