Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
462873f4 by Salvatore Bonaccorso at 2026-10-11T19:41:59+02:00
Update status for node-i18next-http-backend issue
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -5495,7 +5495,7 @@ CVE-2026-105804 (Payload is a free and open source
headless content management s
CVE-2026-105801 (openapi-python-client generates Python clients from OpenAPI
documents. ...)
NOT-FOR-US: openapi-python-client
CVE-2026-105800 (i18next-http-backend is a backend layer for i18next that
loads transla ...)
- - node-i18next-http-backend <unfixed>
+ - node-i18next-http-backend <not-affected> (Incomplte fix for
CVE-2026-41691 not applied)
NOTE:
https://github.com/i18next/i18next-http-backend/security/advisories/GHSA-xvq9-wjp8-hwqf
NOTE: Fixed by:
https://github.com/i18next/i18next-http-backend/commit/07e028862b25d0b9251bf3cafb92be2d35285f85
(v4.0.2)
CVE-2026-105799 (LangChain is a framework for building LLM-powered
applications. Prior ...)
@@ -158916,7 +158916,10 @@ CVE-2026-41900 (OpenLearnX is an open-source,
decentralized learning and assessm
CVE-2026-41692 (i18nextify is a JavaScript library that adds website
internationalizat ...)
NOT-FOR-US: Node i18nextify
CVE-2026-41691 (Copilot said: i18nextify is a JavaScript library that adds
i18nextify ...)
- NOT-FOR-US: Node i18nextify
+ - node-i18next-http-backend <unfixed>
+ NOTE:
https://github.com/i18next/i18next-http-backend/security/advisories/GHSA-q89c-q3h5-w34g
+ NOTE: Fixed by:
https://github.com/i18next/i18next-http-backend/commit/4cee84f229c637b9c182366d3156f726d407a621
(v3.0.5)
+ NOTE: When fixing this issue make sure to make the fix complete and not
open up CVE-2026-105800
CVE-2026-41646 (Nuclei is a vulnerability scanner built on a simple YAML-based
DSL. Fr ...)
NOT-FOR-US: Nuclei
CVE-2026-41645 (Nuclei is a vulnerability scanner built on a simple YAML-based
DSL. Fr ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/462873f41dc80be43bfdcd9cd9bcb5119d6d6c90
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/462873f41dc80be43bfdcd9cd9bcb5119d6d6c90
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
