Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0797ff80 by Salvatore Bonaccorso at 2026-10-01T22:07:14+02:00
Add CVE-2026-103923/node-katex
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -254,7 +254,10 @@ CVE-2026-104056 (Authlib version 1.7.2 and below contains
a vulnerability where
CVE-2026-104018 (An improper privilege management vulnerability (CWE-269)
exists in the ...)
NOT-FOR-US: WindRiver
CVE-2026-103923 (KaTeX is a fast, easy-to-use JavaScript library for TeX math
rendering ...)
- TODO: check
+ - node-katex <unfixed>
+ NOTE:
https://github.com/KaTeX/KaTeX/security/advisories/GHSA-238p-pmpm-9mq7
+ NOTE: https://github.com/KaTeX/KaTeX/pull/4260
+ NOTE: Fixed by:
https://github.com/KaTeX/KaTeX/commit/0adf7e77db6915d991803b29699f82b1ccf8d4f4
(v0.18.2)
CVE-2026-103922 (Capacitor is a cross-platform native runtime for web
applications. Fro ...)
NOT-FOR-US: Capacitor
CVE-2026-103921 (GraphQL Tools provides utilities for building, stitching, and
mocking ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0797ff80d7ade0bb0825de570e0ed7b0cc6a8f0b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0797ff80d7ade0bb0825de570e0ed7b0cc6a8f0b
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
