Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
90739505 by Salvatore Bonaccorso at 2026-07-18T16:23:20+02:00
Add CVE-2026-53727/ruby-css-parser
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -96,7 +96,10 @@ CVE-2026-54163 (secure_headers manages application of
security headers with many
CVE-2026-54159 (PrestaShop ps_facetedsearch is a module that adds layered
navigation f ...)
NOT-FOR-US: PrestaShop
CVE-2026-53727 (css_parser is a Ruby CSS parser. From 2.2.0 until 3.0.0,
CssParser::Pa ...)
- TODO: check
+ - ruby-css-parser 3.0.0-1
+ NOTE:
https://github.com/premailer/css_parser/security/advisories/GHSA-9pmc-p236-855h
+ NOTE: Fixed by:
https://github.com/premailer/css_parser/commit/7d2ddf0189cd54b54f378f59daefa10cb036e476
(v3.0.0)
+ NOTE: Fixed by:
https://github.com/premailer/css_parser/commit/e0a151458b2a801ae265ba420862ef8b1127b3ae
(v3.0.0)
CVE-2026-52584 (Buffer Overflow vulnerability in libjxl v.0.11.2 and before
allows a l ...)
TODO: check
CVE-2026-52348 (cool-admin-java 8.0.0 has a SQL injection vulnerability in the
order() ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/907395057d872f624db10543d819d5dcc861fb16
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/907395057d872f624db10543d819d5dcc861fb16
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
