Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
d5addc4b by Salvatore Bonaccorso at 2026-05-08T15:31:42+02:00
Add CVE-2026-41650/node-webfont

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -533,7 +533,9 @@ CVE-2026-41654 (Weblate is a web based localization tool. 
Prior to version 5.17.
 CVE-2026-41653 (BentoPDF is a client-side PDF toolkit that is self hostable. 
Prior to  ...)
        NOT-FOR-US: BentoPDF
 CVE-2026-41650 (fast-xml-parser allows users to process XML from JS object 
without C/C ...)
-       TODO: check
+       - node-webfont <undetermined>
+       NOTE: 
https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-gh4j-gqv2-49f6
+       NOTE: node-webfont provides node-fast-xml-parser
 CVE-2026-41644 (monetr is a budgeting application for recurring expenses. 
Prior to ver ...)
        NOT-FOR-US: monetr
 CVE-2026-41643 (GoBGP is an open source Border Gateway Protocol (BGP) 
implementation i ...)



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d5addc4be33b2e80d632629b992ee19270d5f7be

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d5addc4be33b2e80d632629b992ee19270d5f7be
You're receiving this email because of your account on salsa.debian.org. Manage 
all notifications: https://salsa.debian.org/-/profile/notifications | Help: 
https://salsa.debian.org/help


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to