Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
caef6f2e by Salvatore Bonaccorso at 2026-09-18T21:50:10+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -5,21 +5,21 @@ CVE-2026-93852 (In OpenStack Blazar before 17.0.1, the V2
lease listing operatio
- blazar <unfixed>
NOTE: https://launchpad.net/bugs/2162719
CVE-2026-93765 (Mongoid contains an unsafe reflection weakness in the document
persist ...)
- TODO: check
+ NOT-FOR-US: Mongoid
CVE-2026-93764 (Mongoid may omit encryption rules for fields declared on
embedded mode ...)
- TODO: check
+ NOT-FOR-US: Mongoid
CVE-2026-93763 (A protection mechanism failure in the object-document mapper's
encrypt ...)
TODO: check
CVE-2026-93762 (Mongoid contains an unsafe reflection weakness in the query
path used ...)
TODO: check
CVE-2026-93761 (An inefficient regular expression complexity issue in the
in-memory qu ...)
- TODO: check
+ NOT-FOR-US: Mongoid
CVE-2026-93760 (Mongoid does not restrict which query operators may come from
caller-s ...)
- TODO: check
+ NOT-FOR-US: Mongoid
CVE-2026-93759 (Mongoid does not neutralize a string-typed query criterion
supplied to ...)
- TODO: check
+ NOT-FOR-US: Mongoid
CVE-2026-93758 (An insecure direct object reference in the nested attributes
handling ...)
- TODO: check
+ NOT-FOR-US: Mongoid
CVE-2026-93753 (deepmerge through 4.3.1 contains a prototype poisoning
vulnerability i ...)
TODO: check
CVE-2026-93752 (CSSOM through 0.5.0 contains a denial of service vulnerability
in CSSS ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/caef6f2ed81cba192927564fb5e30ae677abd9bf
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/caef6f2ed81cba192927564fb5e30ae677abd9bf
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
