Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
17313104 by Salvatore Bonaccorso at 2026-08-18T21:52:58+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -9,21 +9,21 @@ CVE-2026-75926 (Hugo 0.161.0 placed the Node asset pipelines
behind the Node.js
NOTE: Fixed by:
https://github.com/gohugoio/hugo/commit/8a55df7af2e6da31297245cc54fa2e3b521d93e8
(v0.165.0)
TODO: double check introducing commit, as CVE entry claims only
starting 0.162.0
CVE-2026-75924 (A flaw was found in managed-serviceaccount. A compromised
addon-manage ...)
- TODO: check
+ NOT-FOR-US: Red Hat Multicluster Engine for Kubernetes
CVE-2026-75915 (CodeWhale versions before 0.8.64 contain an environment
variable expos ...)
- TODO: check
+ NOT-FOR-US: CodeWhale
CVE-2026-75914 (CodeWhale versions before 0.8.64 contain a path traversal
vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: CodeWhale
CVE-2026-75913 (CodeWhale (codewhale / codewhale-tui) versions >= 0.8.41 and <
0.8.64 ...)
- TODO: check
+ NOT-FOR-US: CodeWhale
CVE-2026-75912 (CodeWhale versions before 0.8.64 contain an argument injection
vulnera ...)
- TODO: check
+ NOT-FOR-US: CodeWhale
CVE-2026-75911 (CodeWhale versions before 0.8.64 fail to properly validate the
allow_s ...)
- TODO: check
+ NOT-FOR-US: CodeWhale
CVE-2026-75904 (libmodplug through 0.8.9.1 contains an out-of-bounds read in
pat_smplo ...)
TODO: check
CVE-2026-75898 (RAGFlow before 0.26.3 contains a server-side request forgery
vulnerabi ...)
- TODO: check
+ NOT-FOR-US: RAGFlow
CVE-2026-75897 (Improper input validation in the capabilities route handler in
OpenSea ...)
NOT-FOR-US: Amazon
CVE-2026-75890
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/17313104a75e3a005b8c0955b89d802691c58da8
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/17313104a75e3a005b8c0955b89d802691c58da8
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
