Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
4885a95c by Moritz Muehlenhoff at 2026-06-22T16:11:18+02:00
new pdfkit issue
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1878,7 +1878,8 @@ CVE-2025-32748 (Dell PowerFlex rack, version(s) RCM
3.7/3.7, contain(s) a Host H
CVE-2025-31013 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2025-26240 (In JazzCore python-pdfkit 1.0.0, the from_string method
enables the ex ...)
- TODO: check
+ - pdfkit <removed>
+ NOTE:
https://habuon.github.io/2025/03/12/pdfkit-vulnerability-%28CVE-2025-26240%29.html
CVE-2025-15657 (Unauthenticated Insecure Direct Object References (IDOR) in
School Man ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2024-52488 (Subscriber Arbitrary File Upload in Grip <= 1.0.9 versions.)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4885a95c206255095cec280a7494c5ba4e22edf1
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4885a95c206255095cec280a7494c5ba4e22edf1
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
