Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f60372e6 by Salvatore Bonaccorso at 2026-07-17T21:33:40+02:00
Add CVE-2026-9537/libmojo-jwt-perl
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -15,7 +15,9 @@ CVE-2026-9586 (An unauthenticated SQL injection vulnerability
exists in Sangoma
CVE-2026-9585 (An unauthenticated reflected cross-site scripting (XSS)
vulnerability ...)
TODO: check
CVE-2026-9537 (Mojo::JWT versions before 1.02 for Perl verify HMAC signatures
with a ...)
- TODO: check
+ - libmojo-jwt-perl 1.02-1
+ NOTE: https://lists.security.metacpan.org/cve-announce/msg/41907805/
+ NOTE: Fixed by:
https://github.com/jberger/Mojo-JWT/commit/b8aefb846613e44b5b12bc170898ffd5b05094a2
(1.02)
CVE-2026-9202 (IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated
attackers ...)
NOT-FOR-US: IBM
CVE-2026-9198 (IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated
attackers ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f60372e6aed7a58caaa0040b66e955d9fb899fb8
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f60372e6aed7a58caaa0040b66e955d9fb899fb8
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
