Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
11795b27 by security tracker role at 2026-10-06T07:13:54+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,4 +1,362 @@
-CVE-2026-104380
+CVE-2026-97300 (Unauthenticated Broken Access Control in WP Event Solution <=
4.1.25 v ...)
+ TODO: check
+CVE-2026-97257 (Deserialization of Untrusted Data vulnerability in PressTigers
Simple ...)
+ TODO: check
+CVE-2026-95265 (Feehi CMS 2.1.1 contains a Server-Side Request Forgery (SSRF)
vulnerab ...)
+ TODO: check
+CVE-2026-95264 (Feehi CMS 2.1.1 is vulnerable to Directory Traversal. An
authenticated ...)
+ TODO: check
+CVE-2026-95263 (Feehi CMS 2.1.1 is vulnerable to Incorrect Access Control. A
low-privi ...)
+ TODO: check
+CVE-2026-94299 (The elegro Crypto Payment WordPress plugin through 1.0.1 does
not requ ...)
+ TODO: check
+CVE-2026-94293 (An unauthenticated remote attacker can modify Asset
Administration She ...)
+ TODO: check
+CVE-2026-94278 (The File Media Renamer WordPress plugin through 1.3 does not
verify th ...)
+ TODO: check
+CVE-2026-94271 (The Deema Payment Gateway WordPress plugin through 1.1.2 does
not veri ...)
+ TODO: check
+CVE-2026-94270 (The Deema Payment Gateway WordPress plugin through 1.1.2 does
not veri ...)
+ TODO: check
+CVE-2026-94201 (Ash stores :atom-typed attributes as strings and compares them
as stri ...)
+ TODO: check
+CVE-2026-93617 (Deserialization of Untrusted Data vulnerability in WP Sunshine
Sunshin ...)
+ TODO: check
+CVE-2026-93326 (A build step for a Git source, crafted in a specific way, can
bypass s ...)
+ TODO: check
+CVE-2026-93321 (A malicious frontend can submit an LLB definition that causes
buildkit ...)
+ TODO: check
+CVE-2026-93315 (When proxy networking with CA injection is enabled, a build
can modify ...)
+ TODO: check
+CVE-2026-92821 (A flaw was found in SSSD. When configured to evaluate password
expirat ...)
+ TODO: check
+CVE-2026-91107 (openSIS Classic 9.3 allows an authenticated user with the
built-in tea ...)
+ TODO: check
+CVE-2026-89289 (The Fast Courier WordPress plugin through 5.2.3 does not
restrict an ...)
+ TODO: check
+CVE-2026-86786 (The Slider Pro WordPress plugin through 1.0.0 does not perform
any cap ...)
+ TODO: check
+CVE-2026-84900 (Previous versions of HP ThinPro (prior to HP ThinPro 8.1 SP10)
could p ...)
+ TODO: check
+CVE-2026-82989 (There is an input injection in vCast exposed network services
in ViewS ...)
+ TODO: check
+CVE-2026-82988 (There exists an arbitrary file download in vCast APK delivery
mechanis ...)
+ TODO: check
+CVE-2026-78862 (An issue in Mercusys AC12 V2 allows a local attacker to
execute arbitr ...)
+ TODO: check
+CVE-2026-78861 (An issue in Mercusys AC12 V2 allows a local attacker to
execute arbitr ...)
+ TODO: check
+CVE-2026-78860 (An issue in Mercusys AC12 V2 allows a local attacker to
execute arbitr ...)
+ TODO: check
+CVE-2026-77226 (Camunda 7.24.0 before 7.24.15 contains an incorrect
authorization vuln ...)
+ TODO: check
+CVE-2026-75962 (The Post SMTP \u2013 Complete Email Deliverability and SMTP
Solution w ...)
+ TODO: check
+CVE-2026-71299 (A flaw was found in Maestro. Its REST API write endpoints were
registe ...)
+ TODO: check
+CVE-2026-71298 (A flaw was found in maestro. A remote attacker could exploit a
SQL inj ...)
+ TODO: check
+CVE-2026-71297 (A flaw was found in the maestro gRPC broker. This
vulnerability allows ...)
+ TODO: check
+CVE-2026-59358 (Improper authentication (CWE-287) in the OAuth token endpoint
in Cloud ...)
+ TODO: check
+CVE-2026-59357 (Insufficient verification of data authenticity (CWE-345) in
the extern ...)
+ TODO: check
+CVE-2026-57559 (Memory corruption while processing service requests.)
+ TODO: check
+CVE-2026-57555 (Memory Corruption when executing system service routines due
to improp ...)
+ TODO: check
+CVE-2026-57554 (Memory Corruption when asynchronous threads access shared
performance ...)
+ TODO: check
+CVE-2026-57546 (Transient DOS when processing a continuous receive command
with a zero ...)
+ TODO: check
+CVE-2026-57545 (Memory corruption when processing draw objects of incorrect
type durin ...)
+ TODO: check
+CVE-2026-57537 (Memory Corruption when accessing and modifying geographic
mapping data ...)
+ TODO: check
+CVE-2026-41563 (Unauthenticated Sensitive Data Exposure in Sitemovr <= 1.0.1
versions.)
+ TODO: check
+CVE-2026-41558 (Subscriber Bypass Vulnerability in WP Migration Plugin DB &
Files \u20 ...)
+ TODO: check
+CVE-2026-39789 (Unauthenticated Broken Access Control in Fluent Affiliate Pro
<= 1.6.4 ...)
+ TODO: check
+CVE-2026-39760 (Unauthenticated Cross Site Scripting (XSS) in Real 3D FlipBook
<= 5.5 ...)
+ TODO: check
+CVE-2026-39723 (Unauthenticated Broken Access Control in Morning for
WooCommerce <= 2. ...)
+ TODO: check
+CVE-2026-39599 (Contributor Broken Access Control in WDS MCP Content Manager
<= 3.10.4 ...)
+ TODO: check
+CVE-2026-32582 (Contributor Broken Access Control in IATO MCP <= 1.11.0
versions.)
+ TODO: check
+CVE-2026-32576 (Customer Insecure Direct Object References (IDOR) in Faktur
Pro for Wo ...)
+ TODO: check
+CVE-2026-25302 (Cryptographic Issue when processing non-ELF partitions,
authentication ...)
+ TODO: check
+CVE-2026-25291 (Memory corruption when performing concurrent operations on
shared memo ...)
+ TODO: check
+CVE-2026-25274 (Memory Corruption when processing concurrent DMA buffer
allocation and ...)
+ TODO: check
+CVE-2026-25273 (Memory Corruption when processing camera operations due to
out-of-boun ...)
+ TODO: check
+CVE-2026-25272 (Memory Corruption when processing camera CRE driver operations
with im ...)
+ TODO: check
+CVE-2026-25270 (Memory corruption when processing command buffer requests with
invalid ...)
+ TODO: check
+CVE-2026-25269 (Memory corruption when processing camera requests with
excessive batch ...)
+ TODO: check
+CVE-2026-25267 (Memory corruption when non-secure loader rewrites page tables
before s ...)
+ TODO: check
+CVE-2026-25263 (Memory corruption while processing IOCTL command called from
user spac ...)
+ TODO: check
+CVE-2026-21589 (h3. Summary This is a vulnerability in Bitbucket Data Center,
Conflue ...)
+ TODO: check
+CVE-2026-105786 (Joplin is an open source note-taking and to-do application
that organi ...)
+ TODO: check
+CVE-2026-105785 (Joplin is an open source note-taking and to-do application
that organi ...)
+ TODO: check
+CVE-2026-105784 (Joplin is an open source note-taking and to-do application
that organi ...)
+ TODO: check
+CVE-2026-105783 (Joplin is an open source note-taking and to-do application
that organi ...)
+ TODO: check
+CVE-2026-105782 (Scrapy is a high-level web crawling and scraping framework
for Python. ...)
+ TODO: check
+CVE-2026-105778 (A vulnerability has been found in Tenda AC5
02.03.01.111_multi. Affect ...)
+ TODO: check
+CVE-2026-105776 (A flaw has been found in bhagya3929
Employee-Movement-Tracking-and-Mon ...)
+ TODO: check
+CVE-2026-105775 (A security vulnerability has been detected in vllm-project
vLLM up to ...)
+ TODO: check
+CVE-2026-105773 (Canimaan Software ClamXAV versions 3.3 - 3.11 contains a
local privile ...)
+ TODO: check
+CVE-2026-105768 (apko allows users to build and publish OCI container images
built from ...)
+ TODO: check
+CVE-2026-105767 (Improper Neutralization of Special Elements used in an OS
Command in t ...)
+ TODO: check
+CVE-2026-105766 (Use of the backend-facing $scheme variable in the
trailing-slash direc ...)
+ TODO: check
+CVE-2026-105764 (Immich is a high-performance self-hosted photo and video
management so ...)
+ TODO: check
+CVE-2026-105763 (Twenty is an open-source CRM (customer relationship
management) platfo ...)
+ TODO: check
+CVE-2026-105762 (Dify is an open-source LLM app development platform. Prior to
1.13.0, ...)
+ TODO: check
+CVE-2026-105761 (Dify is an open-source LLM app development platform. Prior to
1.16.0, ...)
+ TODO: check
+CVE-2026-105760 (vLLM is an inference and serving engine for large language
models. Pri ...)
+ TODO: check
+CVE-2026-105759 (vLLM is an inference and serving engine for large language
models. Pri ...)
+ TODO: check
+CVE-2026-105758 (vLLM is an inference and serving engine for large language
models. Fro ...)
+ TODO: check
+CVE-2026-105757 (vLLM is an inference and serving engine for large language
models. Pri ...)
+ TODO: check
+CVE-2026-105756 (vLLM is an inference and serving engine for large language
models. Pri ...)
+ TODO: check
+CVE-2026-105755 (vLLM is an inference and serving engine for large language
models. Pri ...)
+ TODO: check
+CVE-2026-105754 (vLLM is an inference and serving engine for large language
models. Pri ...)
+ TODO: check
+CVE-2026-105753 (vLLM is an inference and serving engine for large language
models. Pri ...)
+ TODO: check
+CVE-2026-105752 (vLLM is an inference and serving engine for large language
models. Pri ...)
+ TODO: check
+CVE-2026-105751 (Docling simplifies document processing by parsing diverse
formats and ...)
+ TODO: check
+CVE-2026-105750 (Docling simplifies document processing by parsing diverse
formats and ...)
+ TODO: check
+CVE-2026-105749 (Docling simplifies document processing by parsing diverse
formats and ...)
+ TODO: check
+CVE-2026-105748 (Docling simplifies document processing by parsing diverse
formats and ...)
+ TODO: check
+CVE-2026-105747 (Docling simplifies document processing by parsing diverse
formats and ...)
+ TODO: check
+CVE-2026-105746 (Docling simplifies document processing by parsing diverse
formats and ...)
+ TODO: check
+CVE-2026-105745 (Docling simplifies document processing by parsing diverse
formats and ...)
+ TODO: check
+CVE-2026-105744 (Docling simplifies document processing by parsing diverse
formats and ...)
+ TODO: check
+CVE-2026-105743 (Docling simplifies document processing by parsing diverse
formats and ...)
+ TODO: check
+CVE-2026-105742 (Docling simplifies document processing by parsing diverse
formats and ...)
+ TODO: check
+CVE-2026-105741 (Langflow is a tool for building and deploying AI-powered
agents and wo ...)
+ TODO: check
+CVE-2026-105740 (Langflow is a tool for building and deploying AI-powered
agents and wo ...)
+ TODO: check
+CVE-2026-105708 (A flaw has been found in imgproxy up to 4.0.17. Affected by
this vulne ...)
+ TODO: check
+CVE-2026-105707 (A security vulnerability has been detected in uptrace up to
2.1.0-beta ...)
+ TODO: check
+CVE-2026-105706 (A weakness has been identified in SourceCodester Drug
Recommendation S ...)
+ TODO: check
+CVE-2026-105705 (A security flaw has been discovered in SourceCodester Drug
Recommendat ...)
+ TODO: check
+CVE-2026-105704 (A vulnerability was identified in SourceCodester Drug
Recommendation S ...)
+ TODO: check
+CVE-2026-105703 (A vulnerability was determined in PHPGurukul User
Registration & Login ...)
+ TODO: check
+CVE-2026-105701 (The ACPT (Premium) plugin for WordPress is vulnerable to
Remote Code E ...)
+ TODO: check
+CVE-2026-105699 (Langflow is a tool for building and deploying AI-powered
agents and wo ...)
+ TODO: check
+CVE-2026-105698 (Langflow is a tool for building and deploying AI-powered
agents and wo ...)
+ TODO: check
+CVE-2026-105697 (Langflow is a tool for building and deploying AI-powered
agents and wo ...)
+ TODO: check
+CVE-2026-105696 (Penpot is an open-source design and prototyping platform.
Prior to 2.1 ...)
+ TODO: check
+CVE-2026-105695 (Penpot is an open-source design and prototyping platform.
Prior to 2.1 ...)
+ TODO: check
+CVE-2026-105694 (Penpot is an open-source design and prototyping platform.
Prior to 2.1 ...)
+ TODO: check
+CVE-2026-105693 (Penpot is an open-source design and prototyping platform.
Prior to 2.1 ...)
+ TODO: check
+CVE-2026-105692 (Penpot is an open-source design and prototyping platform.
Prior to 2.1 ...)
+ TODO: check
+CVE-2026-105691 (Penpot is an open-source design and prototyping platform.
Prior to 2.1 ...)
+ TODO: check
+CVE-2026-105690 (Penpot is an open-source design and prototyping platform.
Prior to 2.1 ...)
+ TODO: check
+CVE-2026-105689 (Penpot is an open-source design and prototyping platform.
Prior to 2.1 ...)
+ TODO: check
+CVE-2026-105688 (Penpot is an open-source design and prototyping platform.
Prior to 2.1 ...)
+ TODO: check
+CVE-2026-105687 (Penpot is an open-source design and prototyping platform.
Prior to 2.1 ...)
+ TODO: check
+CVE-2026-105686 (Penpot is an open-source design and prototyping platform.
Prior to 2.1 ...)
+ TODO: check
+CVE-2026-105684 (Penpot is an open-source design and prototyping platform.
Prior to 2.1 ...)
+ TODO: check
+CVE-2026-105683 (Ghost is a Node.js content management system. From 6.14.0
until 6.27.0 ...)
+ TODO: check
+CVE-2026-105682 (Ghost is a Node.js content management system. From 1.18.0
until 6.27.0 ...)
+ TODO: check
+CVE-2026-105681 (Ghost is a Node.js content management system. From 5.9.0
until 6.44.1, ...)
+ TODO: check
+CVE-2026-105680 (Ghost is a Node.js content management system. From 5.81.0
until 6.60.0 ...)
+ TODO: check
+CVE-2026-105679 (Ghost is a Node.js content management system. From 6.22.1
until 6.64.0 ...)
+ TODO: check
+CVE-2026-105678 (Ghost is a Node.js content management system. From 0.5.0
until 6.64.0, ...)
+ TODO: check
+CVE-2026-105677 (Ghost is a Node.js content management system. From 6.10.3
until 6.64.0 ...)
+ TODO: check
+CVE-2026-105676 (Ghost is a Node.js content management system. From 1.20.0
until 6.64.0 ...)
+ TODO: check
+CVE-2026-105675 (Ghost is a Node.js content management system. From 4.39.0
until 6.64.0 ...)
+ TODO: check
+CVE-2026-105652 (Ghost is a Node.js content management system. From 0.7.2
until 6.64.0, ...)
+ TODO: check
+CVE-2026-105651 (Ghost is a Node.js content management system. From 5.94.0
until 6.64.0 ...)
+ TODO: check
+CVE-2026-105650 (Ghost is a Node.js content management system. From 2.1.0
until 6.64.0, ...)
+ TODO: check
+CVE-2026-105649 (Ghost is a Node.js content management system. From 4.22.0
until 6.65.0 ...)
+ TODO: check
+CVE-2026-105648 (Ghost is a Node.js content management system. From 6.0.9
until 6.65.0, ...)
+ TODO: check
+CVE-2026-105647 (Ghost is a Node.js content management system. From 6.54.1
until 6.65.0 ...)
+ TODO: check
+CVE-2026-105621 (A security flaw has been discovered in jishenghua jshERP up
to 3.5. Af ...)
+ TODO: check
+CVE-2026-105611 (A vulnerability was determined in chillzhuang SpringBlade up
to 5.0.1. ...)
+ TODO: check
+CVE-2026-105610 (A vulnerability was found in chillzhuang SpringBlade up to
5.0.1. The ...)
+ TODO: check
+CVE-2026-105573 (A vulnerability was found in newbee-ltd newbee-mall up to
2.7.5. This ...)
+ TODO: check
+CVE-2026-105572 (A vulnerability has been found in PickMall Lilishop up to
4.2.4. This ...)
+ TODO: check
+CVE-2026-105571 (A flaw has been found in PickMall Lilishop up to 4.2.4. The
impacted e ...)
+ TODO: check
+CVE-2026-105487 (A vulnerability was found in yogeshojha reNgine up to 2.2.0.
Affected ...)
+ TODO: check
+CVE-2026-105486 (A vulnerability was detected in OSSRS srs up to 7.0-a1. This
affects t ...)
+ TODO: check
+CVE-2026-105484 (A security vulnerability has been detected in TOTOLINK X6000R
9.4.0cu. ...)
+ TODO: check
+CVE-2026-105472 (A weakness has been identified in girishsaraf
Online-Appointment-Booki ...)
+ TODO: check
+CVE-2026-105471 (A security flaw has been discovered in girishsaraf
Online-Appointment- ...)
+ TODO: check
+CVE-2026-105470 (A vulnerability was identified in girishsaraf
Online-Appointment-Booki ...)
+ TODO: check
+CVE-2026-105469 (A vulnerability was determined in girishsaraf
Online-Appointment-Booki ...)
+ TODO: check
+CVE-2026-105468 (A vulnerability was found in girishsaraf
Online-Appointment-Booking-Sy ...)
+ TODO: check
+CVE-2026-105447 (A flaw was found in Quay. When handling build trigger
requests, the ap ...)
+ TODO: check
+CVE-2026-105444 (A security flaw has been discovered in dotnet eShop .NET 8.
The impact ...)
+ TODO: check
+CVE-2026-105438 (A flaw has been found in O2OA up to 10.0.1-ce. This affects
the functi ...)
+ TODO: check
+CVE-2026-105392 (A vulnerability has been found in Lybbn Django-Vue-Lyadmin up
to 3.2.1 ...)
+ TODO: check
+CVE-2026-105389 (A security vulnerability has been detected in feelec-yishu
feelcrm-os ...)
+ TODO: check
+CVE-2026-105388 (A weakness has been identified in feelec-yishu feelcrm-os
1.0.0. This ...)
+ TODO: check
+CVE-2026-105072 (Unauthenticated Broken Access Control in FluentBooking Pro <
2.5.0 ver ...)
+ TODO: check
+CVE-2026-104852 (GraphQL Tools provides utilities for building, stitching, and
mocking ...)
+ TODO: check
+CVE-2026-104044 (A flaw was found in sssd. A local attacker can trigger a
Denial of Ser ...)
+ TODO: check
+CVE-2026-104043 (A flaw was found in SSSD. A local attacker with access to the
Name Ser ...)
+ TODO: check
+CVE-2026-104042 (A flaw was found in sssd. A local attacker can cause a Denial
of Servi ...)
+ TODO: check
+CVE-2026-104041 (A flaw was found in SSSD. An unprivileged local user can
repeatedly re ...)
+ TODO: check
+CVE-2026-104040 (A flaw was found in SSSD. When configured with the Entra ID
identity p ...)
+ TODO: check
+CVE-2026-104039 (A flaw was found in SSSD. A local user can cause a denial of
service ( ...)
+ TODO: check
+CVE-2026-104038 (A flaw was found in sssd. A remote attacker can cause a
denial of serv ...)
+ TODO: check
+CVE-2026-104037 (A flaw was found in SSSD. A local attacker can exploit this
issue by s ...)
+ TODO: check
+CVE-2026-104036 (A flaw was found in SSSD's NFS idmap plugin. When retrieving
cached us ...)
+ TODO: check
+CVE-2026-104035 (A flaw was found in SSSD. An issue in the Kerberos Credential
Manager ...)
+ TODO: check
+CVE-2026-104034 (A flaw was found in SSSD. A use-after-free vulnerability
exists in the ...)
+ TODO: check
+CVE-2026-104033 (A flaw was found in SSSD. When configured to enforce account
expiratio ...)
+ TODO: check
+CVE-2026-104032 (A flaw was found in SSSD. An unprivileged local user can
repeatedly re ...)
+ TODO: check
+CVE-2026-104031 (A flaw was found in SSSD. In configurations where the autofs
responder ...)
+ TODO: check
+CVE-2026-104030 (A flaw was found in sssd. This vulnerability allows a local
user to ca ...)
+ TODO: check
+CVE-2026-104029 (A flaw was found in SSSD. A local attacker can exploit this
vulnerabil ...)
+ TODO: check
+CVE-2026-103546 (In MongoDB Controllers for Kubernetes, insufficient
validation of Ops ...)
+ TODO: check
+CVE-2026-103433 (Docker Buildx Bake does not request the expected fs.read
approval for ...)
+ TODO: check
+CVE-2026-103348 (Deserialization of Untrusted Data vulnerability in
Smackcoders Inc. WP ...)
+ TODO: check
+CVE-2026-103337 (Missing Authorization vulnerability in Kirillbdev WC Ukraine
Shipping ...)
+ TODO: check
+CVE-2026-103066 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
+ TODO: check
+CVE-2026-102262 (Newell Brands DYMO ID 1.5.1.71 resolves its plugin Modules
directory r ...)
+ TODO: check
+CVE-2026-101893 (Newell Brands DYMO ID 1.5.1.71 parses job files using
XmlDocument.Load ...)
+ TODO: check
+CVE-2026-100511 (Deserialization of Untrusted Data vulnerability in Vektor
Inc. VK Goog ...)
+ TODO: check
+CVE-2026-100506 (Deserialization of Untrusted Data vulnerability in WP Spell
Check WP S ...)
+ TODO: check
+CVE-2026-0482 (In AMD Versal\u2122 Adaptive SoC devices, insufficient boundary
checks ...)
+ TODO: check
+CVE-2026-0461 (Insufficient boundary validation in the USB boot mode
implementation o ...)
+ TODO: check
+CVE-2026-104380 (Punk versions from 0.48 before 0.55 for Perl route Extended
CONNECT re ...)
NOT-FOR-US: Punk Perl module
CVE-2026-55480
- cups <unfixed>
@@ -96,7 +454,7 @@ CVE-2026-93316 (If BuildKit daemon is started with
--cdi-disabled it can lead to
TODO: check security impact on docker.io
CVE-2026-92931 (CWE-918: Server-Side Request Forgery in the Progress
@progress/sitefin ...)
NOT-FOR-US: Progress Software
-CVE-2026-89039 (The convert_playwright_script prompt in the k6 MCP server
accepts a fi ...)
+CVE-2026-89039 (A caller who can invoke the convert_playwright_script prompt
in mcp-k6 ...)
NOT-FOR-US: Grafana
CVE-2026-88424 (FineAdmin v1.0 was discovered to contain a SQL injection
vulnerability ...)
NOT-FOR-US: FineAdmin
@@ -7714,7 +8072,7 @@ CVE-2026-17588 [hw/usb/hcd-xhci: Set reentrancy guard in
timer functions]
NOTE: Fixed by:
https://gitlab.com/qemu-project/qemu/-/commit/ed582623e2372fdf862a804d122766052aba81c7
(v11.1.2)
NOTE: Fixed by:
https://gitlab.com/qemu-project/qemu/-/commit/1622c9abec17d5cba63383d4d4cb1419cedf8158
(v10.0.14)
CVE-2026-46675 [Use-after-free of zlib input in `png_read_end` after
incomplete zTXt, iTXt or iCCP decompression]
- {DSA-6537-1}
+ {DSA-6537-1 DLA-4824-1}
- libpng1.6 1.6.59-1
NOTE:
https://github.com/pnggroup/libpng/security/advisories/GHSA-qvg3-h654-xq3j
NOTE: https://github.com/pnggroup/libpng/issues/855
@@ -155901,7 +156259,7 @@ CVE-2026-7702 (A vulnerability was detected in
toeverything AFFiNE up to 0.26.3.
CVE-2026-7701 (A security vulnerability has been detected in Telegram Desktop
up to 6 ...)
- telegram-desktop <undetermined>
TODO: check upstream reports
-CVE-2026-7700 (A weakness has been identified in langflow-ai langflow up to
1.8.4. Th ...)
+CVE-2026-7700 (A weakness has been identified in langflow-ai langflow up to
1.10.2. T ...)
NOT-FOR-US: langflow-ai langflow
CVE-2026-7699 (A security flaw has been discovered in Dromara MaxKey up to
3.5.13. Af ...)
NOT-FOR-US: Dromara MaxKey
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/11795b2716d748ab455f03425d1c471b40c44986
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/11795b2716d748ab455f03425d1c471b40c44986
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
