Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
34e16228 by Salvatore Bonaccorso at 2026-10-01T22:22:48+02:00
Add new ghost issues, itp'ed
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -346,57 +346,57 @@ CVE-2026-103338 (Improper Neutralization of Special
Elements used in an SQL Comm
CVE-2026-103336 (Insertion of Sensitive Information Into Sent Data
vulnerability in Sma ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-103292 (Ghost versions from 0.5.3 through versions prior to 6.50.0
fail to san ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-103291 (Ghost versions from 3.20.2 before 6.51.0 contain a
server-side request ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-103290 (Ghost versions 6.14.0 through versions prior to 6.27.0
contain a path ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-103289 (Ghost from 5.9.0 before 6.44.1 contains an input validation
issue in t ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-103288 (Ghost, an open-source publishing platform, contains an input
validatio ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-103287 (Ghost versions 1.18.0 before 6.27.0 contain a server-side
request forg ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-103286 (Ghost versions from 2.21.0 before 6.56.0 contain a privilege
escalatio ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-103285 (Ghost versions from 5.19.0 before 6.57.1 contain a cross-site
request ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-103284 (Ghost versions from 5.125.1 before 6.57.1 contain an
information discl ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-103283 (Ghost versions 6.20.0 before 6.57.1 contain a session
handling vulnera ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-103282 (Ghost versions 0.5.0 before 6.23.0 contain a concurrency
issue in the ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-103281 (Ghost (npm package 'ghost') versions from 3.23.0 up to, but
not includ ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-103280 (Ghost from version 0.8.0 before 6.23.0 contains an
information disclos ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-103279 (Ghost versions from 3.10.0 before 6.34.0 fail to fully
invalidate all ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-103278 (Ghost versions 5.8.0 before 6.34.0 contain an input
validation vulnera ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-103277 (Ghost versions from 2.5.0 before 6.34.0 contain an untrusted
script ex ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-103276 (Ghost versions before 6.20.0 contain a file extension
filtering bypass ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-103275 (Ghost 5.42.2 before 6.58.0 contains an information disclosure
vulnerab ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-103274 (Ghost versions 5.3.0 before 6.58.0 fail to properly enforce
access con ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-103273 (Ghost versions 4.3.0 before 6.58.0 contain an authentication
bypass vu ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-103272 (Ghost versions from 2.10.0 before 6.63.0 contain a staff
enumeration v ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-103271 (Ghost versions from 4.0.0 before 6.63.0 contain a content API
vulnerab ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-103269 (Ghost versions 5.3.0 before 6.62.0 contain a missing
authorization vul ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-103268 (Ghost versions before 6.62.0 contain an authentication bypass
vulnerab ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-103267 (Ghost versions before 6.62.0 contain an authentication bypass
vulnerab ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-103266 (Ghost versions 5.2.0 through versions prior to 6.62.0 allow a
remote a ...)
- TODO: check
+ - ghost <itp> (bug #892150)
CVE-2026-103265 (Fleet versions before 4.89.0 fail to properly filter MDM
command resul ...)
NOT-FOR-US: Fleet
CVE-2026-103264 (Fleet versions before 4.87.0 contain an authentication bypass
vulnerab ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/34e1622839ef014d6397ac446df279fb699cbd5c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/34e1622839ef014d6397ac446df279fb699cbd5c
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
