Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
12dbaf3d by Salvatore Bonaccorso at 2026-08-01T21:28:57+02:00
Add new guzzle issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,11 +1,14 @@
CVE-2026-6453 (The CubeWP Framework plugin for WordPress is vulnerable to SQL
Injecti ...)
NOT-FOR-US: WordPress plugin
CVE-2026-67355 (guzzlehttp/guzzle versions before 7.15.1 fail to preserve
host-only co ...)
- TODO: check
+ - guzzle 7.15.1-1
+ NOTE:
https://github.com/guzzle/guzzle/security/advisories/GHSA-wm3w-8rrp-j577
CVE-2026-67354 (guzzlehttp/guzzle versions before 7.15.1 contain an
information disclo ...)
- TODO: check
+ - guzzle 7.15.1-1
+ NOTE:
https://github.com/guzzle/guzzle/security/advisories/GHSA-h95v-h523-3mw8
CVE-2026-67353 (guzzlehttp/guzzle versions before 7.15.1 contain a denial of
service v ...)
- TODO: check
+ - guzzle 7.15.1-1
+ NOTE:
https://github.com/guzzle/guzzle/security/advisories/GHSA-f283-ghqc-fg79
CVE-2026-67352 (luci-app-https-dns-proxy contains a stored cross-site
scripting vulner ...)
TODO: check
CVE-2026-67344 (ArcadeDB before 26.7.2 fails to enforce the UPDATE_SCHEMA
database per ...)
@@ -19,7 +22,8 @@ CVE-2026-67341 (ArcadeDB versions before 26.7.2 fail to
enforce scripting author
CVE-2026-67340 (ArcadeDB before 26.7.2 (arcadedb-engine) allows trigger
scripts to loo ...)
TODO: check
CVE-2026-67339 (guzzlehttp/guzzle versions before 7.14.2 fail to properly
isolate Prox ...)
- TODO: check
+ - guzzle 7.14.2-1
+ NOTE:
https://github.com/guzzle/guzzle/security/advisories/GHSA-94pj-82f3-465w
CVE-2026-67338 (JupyterLab before 4.5.9 contains a stored cross-site scripting
vulnera ...)
TODO: check
CVE-2026-67337 (better-auth versions before 1.4.9 contain a two-factor
authentication ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/12dbaf3d0c0fbac4f38619aad2dd161dc76ccb01
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/12dbaf3d0c0fbac4f38619aad2dd161dc76ccb01
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
