Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0ac30db2 by Moritz Muehlenhoff at 2026-10-10T21:33:06+02:00
new openrefine issue
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -119,7 +119,8 @@ CVE-2026-108555 (PairDrop through 1.11.2 contains an IP
spoofing vulnerability i
CVE-2026-108554 (PDFMathTranslate (pdf2zh) through 1.9.11 contains a
server-side reques ...)
NOT-FOR-US: PDFMathTranslate
CVE-2026-108553 (OpenRefine through 3.10.1 contains a cross-site request
forgery vulner ...)
- TODO: check
+ - openrefine <unfixed>
+ NOTE: https://github.com/OpenRefine/OpenRefine/issues/7999
CVE-2026-108551 (openapi-typescript-codegen through 0.31.0 contains a code
injection vu ...)
NOT-FOR-US: openapi-typescript-codegen
CVE-2026-108550 (SkillHub before 0.2.22 contains an incorrect authorization
vulnerabili ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0ac30db2db3a4b2bbc6716e227b1cd968b116cc2
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0ac30db2db3a4b2bbc6716e227b1cd968b116cc2
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits