Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
7a5c5c93 by Salvatore Bonaccorso at 2026-10-12T20:06:27+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -131787,11 +131787,11 @@ CVE-2026-45439 (Unauthenticated SQL Injection in
Realtyna Organic IDX plugin <=
CVE-2026-45437 (Unauthenticated Cross Site Scripting (XSS) in Product Filter
Widget fo ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-45390 (In OCaml-tar before 3.4.0, a crafted archive with ../ path
segments in ...)
- TODO: check
+ NOT-FOR-US: ocaml-tar
CVE-2026-45389 (In OCaml-TLS before 2.1.0, the server implementation does
insufficient ...)
- TODO: check
+ NOT-FOR-US: OCaml-TLS
CVE-2026-45388 (In OCaml-TLS before 2.1.0, the client implementation does
insufficient ...)
- TODO: check
+ NOT-FOR-US: OCaml-TLS
CVE-2026-42775 (Unauthenticated Cross Site Scripting (XSS) in AutomatorWP <=
5.7.2 ver ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-42752 (Unauthenticated Bypass Vulnerability in Stripe Payments <=
2.0.98 vers ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7a5c5c938b1e6a66ffb6a407cbf64bb5d211d12a
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7a5c5c938b1e6a66ffb6a407cbf64bb5d211d12a
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
