Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f18bf17d by Salvatore Bonaccorso at 2026-09-11T10:37:24+02:00
Add CVE-2026-87908/node-multiparty
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -48,7 +48,8 @@ CVE-2026-88061 (career-ops is an open-source AI-assisted job
search and applicat
CVE-2026-87958 (IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is
vulnerable ...)
NOT-FOR-US: IBM
CVE-2026-87908 (multiparty is a Node.js library for parsing
multipart/form-data reques ...)
- TODO: check
+ - node-multiparty <unfixed>
+ NOTE:
https://github.com/pillarjs/multiparty/security/advisories/GHSA-5h46-2939-q3wh
CVE-2026-86815 (The BackWPup WordPress plugin before 5.7.5 does not properly
restrict ...)
NOT-FOR-US: WordPress plugin
CVE-2026-86812 (The WPCafe WordPress plugin before 3.0.18 does not correctly
restrict ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f18bf17dae9ea58aaceb9254ac30a5f8b1a0f311
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f18bf17dae9ea58aaceb9254ac30a5f8b1a0f311
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
