Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
302de639 by security tracker role at 2026-10-19T07:13:59+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,149 @@
+CVE-2026-97859 (Seven Gitea API routes under `/api/v1/users/{username}`
(followers, fo ...)
+ TODO: check
+CVE-2026-97204 (Deleting a label compared the ID of the repository in the
request agai ...)
+ TODO: check
+CVE-2026-94294 (The App Builder WordPress plugin before 5.7.1 does not require
authent ...)
+ TODO: check
+CVE-2026-94273 (The Snap Finance WordPress plugin through 3.11.0 does not
verify that ...)
+ TODO: check
+CVE-2026-94272 (The Snap Finance WordPress plugin before 3.12.0 does not
verify that a ...)
+ TODO: check
+CVE-2026-94231 (The TrueBooker WordPress plugin before 1.3.0 does not have
authorisati ...)
+ TODO: check
+CVE-2026-94230 (The TrueBooker WordPress plugin before 1.3.0 does not have
authorisati ...)
+ TODO: check
+CVE-2026-94229 (The TrueBooker WordPress plugin before 1.3.0 does not verify
that the ...)
+ TODO: check
+CVE-2026-94228 (The TrueBooker WordPress plugin before 1.3.0 does not perform
any capa ...)
+ TODO: check
+CVE-2026-91831 (The Subscribe to Comments WordPress plugin before 2.3.3 does
not sanit ...)
+ TODO: check
+CVE-2026-91047 (The ElementsReady Addons for Elementor WordPress plugin
through 6.7.2 ...)
+ TODO: check
+CVE-2026-91046 (The ElementsReady Addons for Elementor WordPress plugin
through 6.7.2 ...)
+ TODO: check
+CVE-2026-89286 (The FormFlow for GoHighLevel (GHL) WordPress plugin through
1.0.0 doe ...)
+ TODO: check
+CVE-2026-86791 (The iPOSpays Payment Gateway for WooCommerce WordPress plugin
before 1 ...)
+ TODO: check
+CVE-2026-76740 (A security vulnerability in HPE Compute Scale-up Server 3200
and 3250 ...)
+ TODO: check
+CVE-2026-76739 (A potential security vulnerability in HPE Compute Scale-up
Server 3200 ...)
+ TODO: check
+CVE-2026-74922 (The Document Gallery WordPress plugin through 5.1.1 does not
verify th ...)
+ TODO: check
+CVE-2026-74921 (The Document Gallery WordPress plugin through 5.1.1 does not
sanitise ...)
+ TODO: check
+CVE-2026-16487 (A flaw was found in bootc when operating with the default
containers s ...)
+ TODO: check
+CVE-2026-16460 (A flaw was found in bootc and ostree. Already-staged
deployments are f ...)
+ TODO: check
+CVE-2026-112112 (An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD
Internet Routing ...)
+ TODO: check
+CVE-2026-112111 (The Bootstrap Shortcodes plugin for WordPress before 3.4.6 is
vulnerab ...)
+ TODO: check
+CVE-2026-112089 (A security vulnerability has been detected in Dav-ee
dairy-management- ...)
+ TODO: check
+CVE-2026-112088 (A weakness has been identified in Dav-ee
dairy-management-system 31ace ...)
+ TODO: check
+CVE-2026-112087 (A weakness has been identified in itsourcecode Online Cake
Ordering Sy ...)
+ TODO: check
+CVE-2026-112086 (A vulnerability was found in ESPnet up to 202610.post2. This
affects t ...)
+ TODO: check
+CVE-2026-112083 (A security flaw has been discovered in sgl-project SGLang up
to 0.5.19 ...)
+ TODO: check
+CVE-2026-112082 (A vulnerability was identified in sgl-project SGLang up to
0.5.19. Thi ...)
+ TODO: check
+CVE-2026-112081 (A vulnerability was determined in hankcs HanLP up to
2.1.0-beta.64. Th ...)
+ TODO: check
+CVE-2026-112080 (A vulnerability was found in LlamaChinese Llama-Chinese up to
6fa0fffb ...)
+ TODO: check
+CVE-2026-112079 (A vulnerability has been found in hankcs HanLP up to
2.1.0-beta.64. Th ...)
+ TODO: check
+CVE-2026-112078 (A flaw has been found in RVC-Project
Retrieval-based-Voice-Conversion- ...)
+ TODO: check
+CVE-2026-112077 (A vulnerability was detected in radareorg radare2
6.2.0/6.2.2. This is ...)
+ TODO: check
+CVE-2026-112076 (A security vulnerability has been detected in alexta69 MeTube
up to 20 ...)
+ TODO: check
+CVE-2026-112075 (A weakness has been identified in unslothai unsloth up to
0.1.501-beta ...)
+ TODO: check
+CVE-2026-112074 (A security flaw has been discovered in Tencent ncnn up to
44b02dabdcf9 ...)
+ TODO: check
+CVE-2026-112073 (A vulnerability was identified in Tencent ncnn up to
44b02dabdcf974992 ...)
+ TODO: check
+CVE-2026-112045 (A vulnerability was detected in donetick up to 0.1.82. The
impacted el ...)
+ TODO: check
+CVE-2026-112044 (A security vulnerability has been detected in dotnet eShop up
to 913ac ...)
+ TODO: check
+CVE-2026-112043 (A weakness has been identified in calcom cal.com and cal.diy
up to 6.2 ...)
+ TODO: check
+CVE-2026-112042 (A security flaw has been discovered in diem-project diem up
to 116974e ...)
+ TODO: check
+CVE-2026-112041 (A vulnerability was identified in diem-project diem up to
116974edfb9a ...)
+ TODO: check
+CVE-2026-112040 (A vulnerability was determined in diem-project diem up to
116974edfb9a ...)
+ TODO: check
+CVE-2026-112039 (A vulnerability was found in diem-project diem up to
116974edfb9a5b8bd ...)
+ TODO: check
+CVE-2026-112038 (A vulnerability has been found in diem-project diem up to
116974edfb9a ...)
+ TODO: check
+CVE-2026-112037 (A flaw has been found in diem-project diem up to
116974edfb9a5b8bd69cb ...)
+ TODO: check
+CVE-2026-112036 (A vulnerability was detected in Artifex MuPDF up to 1.28.5.
This impac ...)
+ TODO: check
+CVE-2026-112035 (A security vulnerability has been detected in aircheng-org
iWebShop-5 ...)
+ TODO: check
+CVE-2026-112034 (A weakness has been identified in aircheng-org iWebShop-5 up
to 5.16. ...)
+ TODO: check
+CVE-2026-112033 (A security flaw has been discovered in aircheng-org
iWebShop-5 up to 5 ...)
+ TODO: check
+CVE-2026-112032 (A vulnerability was identified in aircheng-org iWebShop-5 up
to 5.16. ...)
+ TODO: check
+CVE-2026-112031 (A vulnerability was determined in Chamilo LMS up to
1.11.40/2.0.3/3.0. ...)
+ TODO: check
+CVE-2026-112030 (A vulnerability was found in diem-project diem up to 5.1.3.
This vulne ...)
+ TODO: check
+CVE-2026-112029 (A vulnerability has been found in diem-project diem up to
5.1.3. This ...)
+ TODO: check
+CVE-2026-112028 (A flaw has been found in light0011 cms
c774dce31c6df0055568a8d5c53d964 ...)
+ TODO: check
+CVE-2026-112027 (A vulnerability was detected in light0011 cms
c774dce31c6df0055568a8d5 ...)
+ TODO: check
+CVE-2026-112026 (A security vulnerability has been detected in light0011 cms
c774dce31c ...)
+ TODO: check
+CVE-2026-112025 (A weakness has been identified in light0011 cms
c774dce31c6df0055568a8 ...)
+ TODO: check
+CVE-2026-111441 (\u5728 openGauss-server \u7684
src/gausskernel/cbb/utils/hll/hll.cpp \ ...)
+ TODO: check
+CVE-2026-111440 (\u5728 openGauss-connector-jdbc \u7684
pgjdbc/src/main/java/org/postgr ...)
+ TODO: check
+CVE-2026-110034 (The Salon Booking System WordPress plugin before 10.31.11
does not enf ...)
+ TODO: check
+CVE-2026-108984 (A vulnerability is in Web Server default connection ports
under the pr ...)
+ TODO: check
+CVE-2026-108983 (A vulnerability is in Web Server default connection ports
under the pr ...)
+ TODO: check
+CVE-2026-108519
+ REJECTED
+CVE-2026-108121 (Brian Mariani from DigitalCanion SA has discovereda
vulnerability in t ...)
+ TODO: check
+CVE-2026-108120 (Brian Mariani from DigitalCanion SA has discovereda path
traversal vul ...)
+ TODO: check
+CVE-2026-106933 (The Blaze Demo Importer WordPress plugin before 1.0.17 does
not saniti ...)
+ TODO: check
+CVE-2026-106028 (The ActiveTrail for WooCommerce WordPress plugin through
1.2.6 does no ...)
+ TODO: check
+CVE-2026-106014 (The Gateway for Vantiv on WC WordPress plugin through 1.0.1
does not v ...)
+ TODO: check
+CVE-2026-106010 (The BDM Digital Payment Gateway WordPress plugin through
1.3.12 does n ...)
+ TODO: check
+CVE-2026-103311 (The Coinbase Commerce Payment Gateway for WooCommerce
WordPress plugin ...)
+ TODO: check
+CVE-2026-103091 (Missing Authorization (CWE-862) and Initialization of a
Resource with ...)
+ TODO: check
+CVE-2026-102503 (Missing Authentication for Critical Function (CWE-306) and
Missing Aut ...)
+ TODO: check
CVE-2026-110336
- libplack-perl 1.0055-1 (unimportant; bug #1151241)
NOTE: Fixed by:
https://github.com/plack/Plack/commit/92eba54ba698b4dad9009604064c9f9fe40e01eb
(1.0055)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/302de63917c37938674fd550071963e70bdd128d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/302de63917c37938674fd550071963e70bdd128d
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
