Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
deb043fa by Moritz Muehlenhoff at 2026-10-15T11:16:13+02:00
NFus
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -113,13 +113,13 @@ CVE-2026-55382 (InvoiceShelf is an open-source web &
mobile app that helps track
CVE-2026-55381 (InvoiceShelf is an open-source web & mobile app that helps
track expen ...)
NOT-FOR-US: InvoiceShelf
CVE-2026-54703 (Markdown Preview Enhanced is a Markdown preview extension for
Visual S ...)
- TODO: check
+ NOT-FOR-US: vscode addon
CVE-2026-54702 (Markdown Preview Enhanced is a Markdown preview extension for
Visual S ...)
- TODO: check
+ NOT-FOR-US: vscode addon
CVE-2026-54701 (Markdown Preview Enhanced is a Markdown preview extension for
Visual S ...)
- TODO: check
+ NOT-FOR-US: vscode addon
CVE-2026-54566 (Markdown Preview Enhanced is a Markdown preview extension for
Visual S ...)
- TODO: check
+ NOT-FOR-US: vscode addon
CVE-2026-3712 (The PhastPress plugin for WordPress is vulnerable to
Server-Side Reque ...)
NOT-FOR-US: WordPress plugin
CVE-2026-18586 (The Premium Packages \u2013 Sell Digital Products Securely
plugin for ...)
@@ -151,7 +151,7 @@ CVE-2026-110925 (A flaw was found in OpenSSH. A username
entered on the ssh comm
CVE-2026-110923 (A flaw was found in OpenSSH. During an sftp copy, a malicious
server c ...)
TODO: check
CVE-2026-110912 (In DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input
handlers ...)
- TODO: check
+ NOT-FOR-US: DragonFly BSD
CVE-2026-110911 (Wheels 1.1.8 through 4.1.1 allows SQL injection when
caller-supplied q ...)
TODO: check
CVE-2026-110909 (Wheels CLI through 4.1.0 does not verify that the local
development se ...)
@@ -173,21 +173,21 @@ CVE-2026-110870 (Nodemailer from 3.0.0 before 10.0.13
contains an improper input
CVE-2026-110869 (Nodemailer 3.0.0 before 10.0.13 has a regular expression
denial of ser ...)
TODO: check
CVE-2026-110868 (Renovate before 44.79.0 contains a server-side request
forgery vulnera ...)
- TODO: check
+ NOT-FOR-US: Renovate
CVE-2026-110867 (Renovate before 44.60.1 contains an allowlist bypass
vulnerability tha ...)
- TODO: check
+ NOT-FOR-US: Renovate
CVE-2026-110866 (Renovate before 44.61.3 contains a protection mechanism
bypass vulnera ...)
- TODO: check
+ NOT-FOR-US: Renovate
CVE-2026-110865 (Renovate before 44.60.1 contains an allowlist bypass
vulnerability tha ...)
- TODO: check
+ NOT-FOR-US: Renovate
CVE-2026-110864 (Better Auth from 1.5.0-beta.12 before 1.7.7 contains an
authentication ...)
- TODO: check
+ NOT-FOR-US: Better Auth
CVE-2026-110863 (Better Auth @better-auth/sso from 1.7.0-rc.2 before 1.7.3
contains an ...)
- TODO: check
+ NOT-FOR-US: Better Auth
CVE-2026-110862 (Better Auth from 1.4.0-beta.18 before 1.7.7 contains an
authentication ...)
- TODO: check
+ NOT-FOR-US: Better Auth
CVE-2026-110861 (Better Auth @better-auth/drizzle-adapter and better-auth from
1.6.17 b ...)
- TODO: check
+ NOT-FOR-US: Better Auth
CVE-2026-110860 (GitPython from 3.1.62 before 3.2.0 contains a
symlink-following flaw i ...)
TODO: check
CVE-2026-110859 (GitPython before 3.2.0 contains an argument injection
vulnerability in ...)
@@ -285,31 +285,31 @@ CVE-2026-105627
CVE-2026-104643 (The Easy HTTPS Redirection (SSL) WordPress plugin before
2.0.2 does no ...)
NOT-FOR-US: WordPress plugin
CVE-2026-104110 (FileRise is a self-hosted web-based file manager with
multi-file uploa ...)
- TODO: check
+ NOT-FOR-US: FileRise
CVE-2026-104109 (FileRise is a self-hosted web-based file manager with
multi-file uploa ...)
- TODO: check
+ NOT-FOR-US: FileRise
CVE-2026-104108 (FileRise is a self-hosted web-based file manager with
multi-file uploa ...)
- TODO: check
+ NOT-FOR-US: FileRise
CVE-2026-104107 (FileRise is a self-hosted web-based file manager with
multi-file uploa ...)
- TODO: check
+ NOT-FOR-US: FileRise
CVE-2026-104106 (FileRise is a self-hosted web-based file manager with
multi-file uploa ...)
- TODO: check
+ NOT-FOR-US: FileRise
CVE-2026-104105 (FileRise is a self-hosted web-based file manager with
multi-file uploa ...)
- TODO: check
+ NOT-FOR-US: FileRise
CVE-2026-103988 (FileRise is a self-hosted web-based file manager with
multi-file uploa ...)
- TODO: check
+ NOT-FOR-US: FileRise
CVE-2026-103977 (FileRise is a self-hosted web-based file manager with
multi-file uploa ...)
- TODO: check
+ NOT-FOR-US: FileRise
CVE-2026-103324 (The Cardinity Payment Gateway for WooCommerce WordPress
plugin before ...)
NOT-FOR-US: WordPress plugin
CVE-2026-103304 (The eaSYNC Booking WordPress plugin before 1.3.31 does not
perform au ...)
NOT-FOR-US: WordPress plugin
CVE-2026-102986 (Plane is an open-source project management tool. In 1.3.1 and
earlier, ...)
- TODO: check
+ NOT-FOR-US: Plane
CVE-2026-102985 (Plane is an open-source project management tool. In 1.3.1 and
earlier, ...)
- TODO: check
+ NOT-FOR-US: Plane
CVE-2026-102980 (Plane is an open-source project management tool. Prior to
1.4.0, PageV ...)
- TODO: check
+ NOT-FOR-US: Plane
CVE-2026-102298 (In Omada Controller MSP mode, the user-confirmation endpoint
fails to ...)
NOT-FOR-US: TPLink
CVE-2026-101306 (SCM_RIGHTS file descriptor passing did not preserve
FD_RESOLVE_BENEATH ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/deb043fab96d6e1de3dbc89e35235ffcc889f7fd
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/deb043fab96d6e1de3dbc89e35235ffcc889f7fd
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
