Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ae306304 by Salvatore Bonaccorso at 2026-09-29T11:33:20+02:00
Add two more pyjwt issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -161,9 +161,13 @@ CVE-2026-102005 (Wind River VxWorks 7 24.03 through 26.03,
a memory leak occurs
CVE-2026-102004 (Wind River VxWorks 7 prior to 26.09, specific system call
arguments ca ...)
NOT-FOR-US: WindRiver
CVE-2026-101918 (PyJWT is a Python implementation of JSON Web Token standards.
From 2.0 ...)
- TODO: check
+ - pyjwt 2.15.0-1
+ NOTE:
https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v
+ NOTE: Fixed by:
https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b
(2.15.0)
CVE-2026-101917 (PyJWT is a Python implementation of JSON Web Token standards.
Prior to ...)
- TODO: check
+ - pyjwt 2.14.0-1
+ NOTE:
https://github.com/jpadilla/pyjwt/security/advisories/GHSA-2gx3-rcp4-g85q
+ NOTE: Fixed by:
https://github.com/jpadilla/pyjwt/commit/ba4853a75fb9676362da17f67d0f64bd18afd4e1
(2.14.0)
CVE-2026-101916 (@grpc/grpc-js implements the core functionality of gRPC
purely in Java ...)
TODO: check
CVE-2026-101915 (@grpc/grpc-js implements the core functionality of gRPC
purely in Java ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ae3063042b97ff2a843f8e3c3da2a9353fdc9277
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ae3063042b97ff2a843f8e3c3da2a9353fdc9277
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
