Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a01e604d by security tracker role at 2026-11-05T07:14:11+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,499 @@
+CVE-2026-97702 (Open edX Platform enables the authoring and delivery of online
learnin ...)
+ TODO: check
+CVE-2026-97693 (Yuxi is a large-model-based intelligent knowledge base and
knowledge g ...)
+ TODO: check
+CVE-2026-97373 (draw.io is a configurable diagramming and whiteboarding
application. P ...)
+ TODO: check
+CVE-2026-93389 (The LiteSpeed Cache plugin for WordPress is vulnerable to
unauthentica ...)
+ TODO: check
+CVE-2026-91049 (The EWWW Image Optimizer WordPress plugin before 8.9.1 does
not proper ...)
+ TODO: check
+CVE-2026-90967 (The Essential Real Estate WordPress plugin before 5.3.5 does
not verif ...)
+ TODO: check
+CVE-2026-90966 (The Essential Real Estate WordPress plugin before 5.3.5 does
not verif ...)
+ TODO: check
+CVE-2026-90965 (The Essential Real Estate WordPress plugin before 5.3.5 does
not perfo ...)
+ TODO: check
+CVE-2026-90964 (The Essential Real Estate WordPress plugin before 5.3.5 does
not restr ...)
+ TODO: check
+CVE-2026-90963 (The Essential Real Estate WordPress plugin before 5.3.5 does
not perfo ...)
+ TODO: check
+CVE-2026-88814 (The YITH WooCommerce Gift Cards WordPress plugin before 4.38.1
does no ...)
+ TODO: check
+CVE-2026-87856 (The Subscriptions for WooCommerce WordPress plugin before
2.1.1 only e ...)
+ TODO: check
+CVE-2026-86795 (The Community Events WordPress plugin before 1.6.0 does not
have autho ...)
+ TODO: check
+CVE-2026-86442 (The WP Event Manager WordPress plugin before 3.4.2 does not
verify th ...)
+ TODO: check
+CVE-2026-86041 (ezBookkeeping is an open source, self-hosted personal finance
applicat ...)
+ TODO: check
+CVE-2026-85570 (The Tutor LMS WordPress plugin before 4.2.0 does not prevent
the corr ...)
+ TODO: check
+CVE-2026-85351 (The FV Flowplayer Video Player WordPress plugin before
7.5.56.7212 doe ...)
+ TODO: check
+CVE-2026-85347 (The FV Flowplayer Video Player WordPress plugin before
7.5.56.7212 doe ...)
+ TODO: check
+CVE-2026-85346 (The FV Flowplayer Video Player WordPress plugin before
7.5.56.7212 doe ...)
+ TODO: check
+CVE-2026-82418 (IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could
allow a ...)
+ TODO: check
+CVE-2026-77372 (VeraCrypt provides disk encryption with strong security based
on TrueC ...)
+ TODO: check
+CVE-2026-76893 (tsParticles is a TypeScript library for creating highly
customizable p ...)
+ TODO: check
+CVE-2026-76892 (tsParticles is a TypeScript library for creating highly
customizable p ...)
+ TODO: check
+CVE-2026-76826 (tsParticles is a TypeScript library for creating highly
customizable p ...)
+ TODO: check
+CVE-2026-76806 (Solidtime is an open-source time-tracking app. Prior to
0.16.0, TogglD ...)
+ TODO: check
+CVE-2026-69068 (Insufficient length validation in the GNSS firmware loader may
lead to ...)
+ TODO: check
+CVE-2026-69066 (Memory corruption in GPU driver due to improper validation of
VMID res ...)
+ TODO: check
+CVE-2026-69050 (Out-of-bounds memory access in a device driver due to improper
resourc ...)
+ TODO: check
+CVE-2026-69044 (In the Samsung GPU driver, improper reference count handling
during co ...)
+ TODO: check
+CVE-2026-69043 (In the Samsung Exynos GPU driver, improper synchronization
during buff ...)
+ TODO: check
+CVE-2026-69025 (In the Exynos NPU driver, improper validation of user input in
the ioc ...)
+ TODO: check
+CVE-2026-69006 (Insufficient validation of length fields in the GNSS firmware
loader c ...)
+ TODO: check
+CVE-2026-69005 (Integer overflow in NPU driver parameter processing due to
insufficien ...)
+ TODO: check
+CVE-2026-69002 (Incorrect authorization in Samsung framework services due to
missing p ...)
+ TODO: check
+CVE-2026-68994 (A double free vulnerability in NPU driver due to improper
pointer mana ...)
+ TODO: check
+CVE-2026-68993 (A double free vulnerability in NPU driver due to improper
pointer mana ...)
+ TODO: check
+CVE-2026-68991 (In the Samsung Exynos ENN NeuralNetworks HAL, improper input
validatio ...)
+ TODO: check
+CVE-2026-68990 (In the Samsung Exynos H-Arx DRM plugin, improper input
validation duri ...)
+ TODO: check
+CVE-2026-68985 (In the Samsung Exynos NPU driver, improper validation of user
input in ...)
+ TODO: check
+CVE-2026-68984 (In the Samsung Exynos NPU kernel driver, an integer overflow
allows an ...)
+ TODO: check
+CVE-2026-63655 (tsParticles is a TypeScript library for creating highly
customizable p ...)
+ TODO: check
+CVE-2026-62662 (Pocket ID is an OIDC provider that allows users to
authenticate with t ...)
+ TODO: check
+CVE-2026-62365 (Wazuh is an open-source security platform providing unified
XDR and SI ...)
+ TODO: check
+CVE-2026-58128 (Alan: Health Insurance for Android (com.alanmobile) 1.450.0
contains a ...)
+ TODO: check
+CVE-2026-57567 (Readest is a modern, feature-rich ebook reader designed for
seamless c ...)
+ TODO: check
+CVE-2026-57566 (Readest is a modern, feature-rich ebook reader designed for
seamless c ...)
+ TODO: check
+CVE-2026-57565 (Readest is a modern, feature-rich ebook reader designed for
seamless c ...)
+ TODO: check
+CVE-2026-57562 (Readest is a modern, feature-rich ebook reader designed for
seamless c ...)
+ TODO: check
+CVE-2026-57152 (GLPI is a free asset and IT management software package. From
0.85 unt ...)
+ TODO: check
+CVE-2026-55368 (h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and
HTTP/3. Pr ...)
+ TODO: check
+CVE-2026-55367 (h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and
HTTP/3. Pr ...)
+ TODO: check
+CVE-2026-54384 (VitaFit cloud API before 2026-10-30 contained an
authentication bypass ...)
+ TODO: check
+CVE-2026-54383 (VitaFit cloud API before 2026-10-30 contained an excessive
data exposu ...)
+ TODO: check
+CVE-2026-54382 (VitaFit cloud API before 2026-10-30 contained an improper
access contr ...)
+ TODO: check
+CVE-2026-54381 (VitaFit cloud API before 2026-10-30 contained a misconfigured
cloud st ...)
+ TODO: check
+CVE-2026-54380 (VitaFit cloud API before 2026-10-30 contained a stored
cross-site scri ...)
+ TODO: check
+CVE-2026-54379
+ REJECTED
+CVE-2026-54378 (VitaFit cloud API before 2026-10-30 contained a broken access
control ...)
+ TODO: check
+CVE-2026-54377 (VitaFit cloud API before 2026-10-30 contained an insecure
direct objec ...)
+ TODO: check
+CVE-2026-54376 (VitaFit Android application (com.vt.vitafit) before 2.8.1.0
contains a ...)
+ TODO: check
+CVE-2026-54375 (VitaFit Android application (com.vt.vitafit) before 2.8.1.0
contains a ...)
+ TODO: check
+CVE-2026-54374 (VitaFit Android application (com.vt.vitafit) before 2.8.1.0
contains a ...)
+ TODO: check
+CVE-2026-54373 (VitaFit Android application (com.vt.vitafit) before 2.8.1.0
contains a ...)
+ TODO: check
+CVE-2026-54372 (VitaFit Android application (com.vt.vitafit) before 2.8.1.0
contains a ...)
+ TODO: check
+CVE-2026-53631 (GLPI is a free asset and IT management software package. From
0.83 unt ...)
+ TODO: check
+CVE-2026-52848 (GLPI is a free asset and IT management software package. From
11.0.0 u ...)
+ TODO: check
+CVE-2026-48186 (Improper handling of messages before AS security activation
can cause ...)
+ TODO: check
+CVE-2026-48183 (Improper permission handling during buffer operations allows
untrusted ...)
+ TODO: check
+CVE-2026-48179 (In the Exynos modem's IMS stack, improper handling of SDP
payload lead ...)
+ TODO: check
+CVE-2026-48178 (Out of bound access in PPC due to race condition in global
variable ac ...)
+ TODO: check
+CVE-2026-48176 (A memory corruption vulnerability caused by improper
validation of mes ...)
+ TODO: check
+CVE-2026-48175 (Processing a malformed RRC message leads to an out-of-bounds
read, res ...)
+ TODO: check
+CVE-2026-48174 (In the NR RRC component, improper handling of messages before
authenti ...)
+ TODO: check
+CVE-2026-48173 (In the NAS message handler, improper validation of the length
field in ...)
+ TODO: check
+CVE-2026-47678 (GLPI is a free asset and IT management software package. From
9.4.0 un ...)
+ TODO: check
+CVE-2026-35495 (In IMS stack, improper handling of SIP packets leads to
Incorrect_Acce ...)
+ TODO: check
+CVE-2026-35494 (In the baseband, memory corruption during NAS packet
processing can ca ...)
+ TODO: check
+CVE-2026-33972 (In the Exynos modem's IMS stack, Out of Bound access occurs
due to imp ...)
+ TODO: check
+CVE-2026-33971 (In the LTE RRC component, improper handling of messages before
authent ...)
+ TODO: check
+CVE-2026-33969 (In the NAS Authentication Request message decoding procedure,
a missin ...)
+ TODO: check
+CVE-2026-33965 (An attacker may send a malicious IMS message to the target
device, pot ...)
+ TODO: check
+CVE-2026-33958 (Processing a malformed RRC Reconfiguration message leads to an
out-of- ...)
+ TODO: check
+CVE-2026-19319 (IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could
allow a ...)
+ TODO: check
+CVE-2026-19256 (The All In One Login WordPress plugin before 2.5.0 does not
adequately ...)
+ TODO: check
+CVE-2026-18142 (IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42
LTS, 9.4 ...)
+ TODO: check
+CVE-2026-17493 (IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could
allow a ...)
+ TODO: check
+CVE-2026-16725 (IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could
allow a ...)
+ TODO: check
+CVE-2026-16304 (The WP Event Manager WordPress plugin before 3.4.2 does not
properly ...)
+ TODO: check
+CVE-2026-14252 (IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42
LTS, 9.4 ...)
+ TODO: check
+CVE-2026-13292 (IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42
LTS, 9.4 ...)
+ TODO: check
+CVE-2026-13289 (IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42
LTS, 9.4 ...)
+ TODO: check
+CVE-2026-13284 (IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42
LTS, 9.4 ...)
+ TODO: check
+CVE-2026-13271 (IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42
LTS, 9.4 ...)
+ TODO: check
+CVE-2026-12550 (IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42
LTS, 9.4 ...)
+ TODO: check
+CVE-2026-12538 (IBM MQ 9.4.0.0 to 9.4.0.26, 9.4.1.0 to 9.4.5.3, and 10.0.0.1
to 10.0.0 ...)
+ TODO: check
+CVE-2026-12356 (IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42
LTS, 9.4 ...)
+ TODO: check
+CVE-2026-123033 (Authentication bypass in the HA heartbeat origin check in
middlewared ...)
+ TODO: check
+CVE-2026-123029 (Wowza Streaming Engine before 4.12.2 processes XML external
entities, ...)
+ TODO: check
+CVE-2026-123025 (An OS Command Injection vulnerability was discovered in the
Google Clo ...)
+ TODO: check
+CVE-2026-123017 (GodotSteam 4.17 through 4.23.2 trusts the peer value of 1 to
mean that ...)
+ TODO: check
+CVE-2026-123014 (iTerm2 before 3.7.7beta2 has an argument injection
vulnerability in th ...)
+ TODO: check
+CVE-2026-123012 (In Gogs 0.14.3, the Git Smart HTTP authorization layer in
internal/rou ...)
+ TODO: check
+CVE-2026-123011 (STMicroelectronics st-mems-android-linux-sensors-hal before
7bdf334 do ...)
+ TODO: check
+CVE-2026-123010 (@twilio-labs/netlify-okta-auth through 1.0.2 relies on an
unverified i ...)
+ TODO: check
+CVE-2026-122992 (In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6,
dstarCall ...)
+ TODO: check
+CVE-2026-122323 (Kyverno from 1.11.0 before 1.19.2 contains an unbounded
decompression ...)
+ TODO: check
+CVE-2026-122322 (Kyverno from 1.11.0 before 1.19.2 contains an unbounded
decompression ...)
+ TODO: check
+CVE-2026-122321 (Kyverno 1.18.0 before 1.19.2 contains a signature
verification bypass ...)
+ TODO: check
+CVE-2026-122320 (Kyverno before 1.19.2 contains a missing authorization
vulnerability t ...)
+ TODO: check
+CVE-2026-122319 (Kyverno before 1.19.2 contains a denial-of-service
vulnerability in th ...)
+ TODO: check
+CVE-2026-122318 (Kyverno before 1.19.2 contains an authentication bypass in
matchCertif ...)
+ TODO: check
+CVE-2026-122316 (Kyverno from 1.17.0 before 1.19.2 contains a missing
authorization vul ...)
+ TODO: check
+CVE-2026-122315 (Kyverno before 1.19.2 contains an unchecked type assertion in
buildSta ...)
+ TODO: check
+CVE-2026-122314 (Kyverno before 1.19.2 contains an unchecked type assertion in
its vari ...)
+ TODO: check
+CVE-2026-122313 (Kyverno from 1.17.0 before 1.19.2 contains a privilege
escalation vuln ...)
+ TODO: check
+CVE-2026-122312 (Kyverno from 1.19.1 before 1.19.2 contains a namespace
isolation bypas ...)
+ TODO: check
+CVE-2026-122311 (Kyverno from 1.16.0 before 1.19.2 fails to validate path
segments in t ...)
+ TODO: check
+CVE-2026-122310 (Kyverno from 1.19.1 before 1.19.2 validates a Policy's
context.apiCall ...)
+ TODO: check
+CVE-2026-122309 (Kyverno before 1.19.2 contains a denial of service
vulnerability that ...)
+ TODO: check
+CVE-2026-122308 (Kyverno before 1.19.2 contains an authorization bypass
vulnerability i ...)
+ TODO: check
+CVE-2026-122307 (Kyverno before 1.19.2 contains a policy bypass vulnerability
in the ad ...)
+ TODO: check
+CVE-2026-122306 (Kyverno before 1.19.2 contains a denial of service
vulnerability that ...)
+ TODO: check
+CVE-2026-122305 (Kyverno before 1.19.2 contains a denial of service
vulnerability in su ...)
+ TODO: check
+CVE-2026-122304 (Kyverno from 1.17.0 before 1.19.2 contains an authorization
bypass vul ...)
+ TODO: check
+CVE-2026-122303 (Kyverno from 1.17.0 before 1.19.2 contains an authorization
bypass vul ...)
+ TODO: check
+CVE-2026-122302 (Kyverno before 1.19.2 contains a privilege escalation
vulnerability th ...)
+ TODO: check
+CVE-2026-122301 (Parse Server before 8.6.114 and 9.0.0 before 9.10.6-alpha.6
returns fi ...)
+ TODO: check
+CVE-2026-122299 (Dulwich before 1.2.20 contains a commit object parsing
vulnerability w ...)
+ TODO: check
+CVE-2026-122266 (Improper isolation of shared resources in
aws-network-policy-agent in ...)
+ TODO: check
+CVE-2026-122236 (A vulnerability has been found in OpenHands up to 1.24.0.
This impacts ...)
+ TODO: check
+CVE-2026-122235 (Jan from 0.8.5 before 0.8.8 contains a workspace guard bypass
vulnerab ...)
+ TODO: check
+CVE-2026-122234 (jsondiffpatch before 0.7.7 contains a cross-site scripting
vulnerabili ...)
+ TODO: check
+CVE-2026-122233 (FrankenPHP before 1.13.4 contains an information disclosure
vulnerabil ...)
+ TODO: check
+CVE-2026-122224 (WebVirtCloud through commit bb920b0 contains a missing
authorization v ...)
+ TODO: check
+CVE-2026-122220 (WPO365 | LOGIN (wpo365-login) plugin before version 45.2
contains an a ...)
+ TODO: check
+CVE-2026-122192 (Improper handling of a failed memory remap in Firecracker
versions 0.2 ...)
+ TODO: check
+CVE-2026-122191 (A vulnerability was determined in itsourcecode Airline
Reservation Sys ...)
+ TODO: check
+CVE-2026-122190 (A vulnerability was found in SourceCodester Online Food
Ordering Syste ...)
+ TODO: check
+CVE-2026-122189 (A vulnerability has been found in OpenPPL ppl.nn up to
bb84dc9952809b3 ...)
+ TODO: check
+CVE-2026-122188 (A flaw has been found in DeepGraphLearning
KnowledgeGraphEmbedding up ...)
+ TODO: check
+CVE-2026-122160 (A security vulnerability has been detected in myshell-ai
AIlice up to ...)
+ TODO: check
+CVE-2026-122159 (A weakness has been identified in Edge0-AI Audio8_TTS up to
1d64afcc2d ...)
+ TODO: check
+CVE-2026-122158 (A security flaw has been discovered in InvoiceShelf up to
2.4.3/3.0.0- ...)
+ TODO: check
+CVE-2026-122157 (A vulnerability was identified in Purocean Yank Note 3.93.0.
Affected ...)
+ TODO: check
+CVE-2026-122154 (A vulnerability was found in purocean Yank Note 3.93.0. This
impacts t ...)
+ TODO: check
+CVE-2026-122151 (A security vulnerability has been detected in Presenton up to
0.9.11-b ...)
+ TODO: check
+CVE-2026-122146 (A weakness has been identified in 101arrowz fflate up to
0.8.3. This i ...)
+ TODO: check
+CVE-2026-122144 (A security flaw has been discovered in nliautaud
pico-content-editor u ...)
+ TODO: check
+CVE-2026-122140 (Trawl 1.5.0 before 1.10.0 contains a server-side request
forgery vulne ...)
+ TODO: check
+CVE-2026-122139 (blueprintUE Self-Hosted Edition before 4.3.3 contains an
account enume ...)
+ TODO: check
+CVE-2026-122138 (BlueprintUE Self-Hosted Edition 4.2.0 before 4.3.4 contains a
login ra ...)
+ TODO: check
+CVE-2026-122137 (Powerlevel10k before 1.20.19 contains an insecure temporary
directory ...)
+ TODO: check
+CVE-2026-122136 (Powerlevel10k before 1.20.19 contains a symlink following
vulnerabilit ...)
+ TODO: check
+CVE-2026-122135 (Mistral Vibe before 3.0.3 contains a remote code execution
vulnerabili ...)
+ TODO: check
+CVE-2026-122134 (Mistral Vibe before 2.25.7 contains a remote code execution
vulnerabil ...)
+ TODO: check
+CVE-2026-122133 (Mistral Vibe before 2.25.5 on Windows contains an untrusted
search pat ...)
+ TODO: check
+CVE-2026-122132 (go-chi chi 5.2.2 through 5.5.0 contains an open redirect
vulnerability ...)
+ TODO: check
+CVE-2026-122131 (Joi 17.13.6 before 17.13.9 and 18.2.5 before 18.3.1 contains
a prototy ...)
+ TODO: check
+CVE-2026-122130 (CESNET ipfixcol2 2.3.0 before 2.9.0 contains an integer
overflow vulne ...)
+ TODO: check
+CVE-2026-122129 (CESNET ipfixcol2 2.7.1 before 2.9.0 contains a memory
allocation vulne ...)
+ TODO: check
+CVE-2026-122127 (CESNET ipfixcol2 2.7.1 before 2.9.0 contains a heap-based
buffer overf ...)
+ TODO: check
+CVE-2026-122126 (reSIProcate reTurn client through 1.14.0 contains a heap
buffer overfl ...)
+ TODO: check
+CVE-2026-122052 (A vulnerability has been found in laspy up to 2.7.0. Affected
by this ...)
+ TODO: check
+CVE-2026-122051 (A flaw has been found in Edimax BR-6208AC 1.32. Affected by
this vulne ...)
+ TODO: check
+CVE-2026-122050 (A vulnerability was found in Campcodes Complete Sales and
Inventory Sy ...)
+ TODO: check
+CVE-2026-122049 (A flaw has been found in Campcodes Bitcoin Wallet System 1.0.
This aff ...)
+ TODO: check
+CVE-2026-122048 (A vulnerability was identified in Campcodes Division Regional
Athletic ...)
+ TODO: check
+CVE-2026-122047 (A security vulnerability has been detected in Campcodes
Complete Advan ...)
+ TODO: check
+CVE-2026-122038 (A vulnerability was identified in krupalshah
EmployeeRecruitmentSystem ...)
+ TODO: check
+CVE-2026-122028 (A vulnerability has been found in NST Labs Tech Nstbrowser
1.21.0. Aff ...)
+ TODO: check
+CVE-2026-122020 (A security flaw has been discovered in NST Labs Tech
Nstbrowser up to ...)
+ TODO: check
+CVE-2026-122019 (A vulnerability was identified in 6amTech 6valley 16.0.
Impacted is th ...)
+ TODO: check
+CVE-2026-122016 (A vulnerability was determined in yangzongzhuan RuoYi-Vue up
to 3.9.2. ...)
+ TODO: check
+CVE-2026-122015 (A vulnerability was found in NPC-Worldwide npcpy up to
2.1.27. This vu ...)
+ TODO: check
+CVE-2026-122014 (A vulnerability has been found in NPC-Worldwide npcpy up to
2.1.27. Th ...)
+ TODO: check
+CVE-2026-122013 (A vulnerability was detected in Comfast CF-WR632AX 2.6.0.1.
Affected b ...)
+ TODO: check
+CVE-2026-122009 (A flaw has been found in DataLinkDC Dinky up to 1.2.5. This
vulnerabil ...)
+ TODO: check
+CVE-2026-121969 (netrek-client-cow through 3.3.3 contains a stack-based buffer
overflow ...)
+ TODO: check
+CVE-2026-121968 (Netrek-client-cow through 3.3.3 contains an out-of-bounds
read vulnera ...)
+ TODO: check
+CVE-2026-121751 (Node Version Manager (nvm) is a POSIX-compliant shell
function for man ...)
+ TODO: check
+CVE-2026-121750 (Node Version Manager (nvm) is a POSIX-compliant shell
function for man ...)
+ TODO: check
+CVE-2026-121749 (Node Version Manager (nvm) is a POSIX-compliant shell
function for man ...)
+ TODO: check
+CVE-2026-121748 (Node Version Manager (nvm) is a POSIX-compliant shell
function for man ...)
+ TODO: check
+CVE-2026-121747 (Node Version Manager (nvm) is a POSIX-compliant shell
function for man ...)
+ TODO: check
+CVE-2026-121746 (Node Version Manager (nvm) is a POSIX-compliant shell
function for man ...)
+ TODO: check
+CVE-2026-121745 (Node Version Manager (nvm) is a POSIX-compliant shell
function for man ...)
+ TODO: check
+CVE-2026-120553 (The Customer Reviews for WooCommerce plugin for WordPress is
vulnerabl ...)
+ TODO: check
+CVE-2026-120533 (The Redux Framework plugin for WordPress is vulnerable to
Stored Cross ...)
+ TODO: check
+CVE-2026-11724 (IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42
LTS, 9.4 ...)
+ TODO: check
+CVE-2026-11376 (IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42
LTS, 9.4 ...)
+ TODO: check
+CVE-2026-118193 (The GiveWP \u2013 Donation Plugin and Fundraising Platform
plugin for ...)
+ TODO: check
+CVE-2026-116617 (The Motors \u2013 Car Dealership & Classified Listings Plugin
plugin f ...)
+ TODO: check
+CVE-2026-116376 (IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a
remote aut ...)
+ TODO: check
+CVE-2026-115770 (Pocket ID is an OIDC provider that allows users to
authenticate with t ...)
+ TODO: check
+CVE-2026-115762 (draw.io is a configurable diagramming and whiteboarding
application. P ...)
+ TODO: check
+CVE-2026-115758 (SumatraPDF is a multi-format reader for Windows. In version
3.6.1 and ...)
+ TODO: check
+CVE-2026-115473 (Mongoose is an embedded web server and network library. Prior
to 7.22, ...)
+ TODO: check
+CVE-2026-113374 (Sonatype Nexus Repository 3 does not require realm
administration perm ...)
+ TODO: check
+CVE-2026-113373 (Sonatype Nexus Repository 3 Pro does not check the local
account statu ...)
+ TODO: check
+CVE-2026-113372 (Sonatype Nexus Repository 3 returns the private signing key
of a YUM p ...)
+ TODO: check
+CVE-2026-113371 (Sonatype Nexus Repository 3 returns the signing passphrase of
an APT o ...)
+ TODO: check
+CVE-2026-113370 (Sonatype Nexus Repository 3 contains a SQL injection
vulnerability in ...)
+ TODO: check
+CVE-2026-113369 (Sonatype Nexus Repository 3 allows a user account that can
push manife ...)
+ TODO: check
+CVE-2026-113368 (Sonatype Nexus Repository 3 does not check that a user
account is auth ...)
+ TODO: check
+CVE-2026-110283 (IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a
remote aut ...)
+ TODO: check
+CVE-2026-110282 (IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a
remote aut ...)
+ TODO: check
+CVE-2026-110281 (IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 improperly
validates TLS ...)
+ TODO: check
+CVE-2026-10859 (IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42
LTS, 9.4 ...)
+ TODO: check
+CVE-2026-109849 (Incorrect privilege assignment issue exists in Hinemos. If
this vulner ...)
+ TODO: check
+CVE-2026-109150 (The WP PageNavi Style WordPress plugin through 1.4 does not
sanitise a ...)
+ TODO: check
+CVE-2026-108910 (IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a
remote aut ...)
+ TODO: check
+CVE-2026-108838 (IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a
local atta ...)
+ TODO: check
+CVE-2026-108767 (IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a
remote aut ...)
+ TODO: check
+CVE-2026-108588 (IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a
remote aut ...)
+ TODO: check
+CVE-2026-108536 (IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a
remote aut ...)
+ TODO: check
+CVE-2026-108387 (radare2 is a UNIX-like reverse engineering framework and
command-line ...)
+ TODO: check
+CVE-2026-107787 (The CatFolders WordPress plugin before 2.5.7 does not have
authorisat ...)
+ TODO: check
+CVE-2026-107786 (The CatFolders WordPress plugin before 2.5.7 does not
properly saniti ...)
+ TODO: check
+CVE-2026-107775 (The Dokan: AI Powered WooCommerce Multivendor Marketplace
Solution Wo ...)
+ TODO: check
+CVE-2026-107774 (The Dokan: AI Powered WooCommerce Multivendor Marketplace
Solution Wo ...)
+ TODO: check
+CVE-2026-107773 (The Dokan: AI Powered WooCommerce Multivendor Marketplace
Solution Wo ...)
+ TODO: check
+CVE-2026-105991 (IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a
remote aut ...)
+ TODO: check
+CVE-2026-105971 (The Car Dealer (Dealership) and Vehicle sales WordPress
plugin through ...)
+ TODO: check
+CVE-2026-105702 (IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a
remote aut ...)
+ TODO: check
+CVE-2026-105259 (The Easy Social Icons WordPress plugin before 4.0.3 does not
sanitise ...)
+ TODO: check
+CVE-2026-104812 (The Redux Framework plugin for WordPress is vulnerable to
Stored Cross ...)
+ TODO: check
+CVE-2026-104203 (Traccar is an open source GPS tracking system. From 5.1 until
6.15.0, ...)
+ TODO: check
+CVE-2026-103002 (GPUStack is an open-source GPU cluster manager for AI model
serving an ...)
+ TODO: check
+CVE-2026-102895 (GPUStack is an open-source GPU cluster manager for AI model
serving an ...)
+ TODO: check
+CVE-2026-102894 (GPUStack is an open-source GPU cluster manager for AI model
serving an ...)
+ TODO: check
+CVE-2026-102664 (ProxySQL is a proxy for MySQL and its forks, as well as
PostgreSQL. Pr ...)
+ TODO: check
+CVE-2026-102340 (Telepresence enables local development against a remote
Kubernetes or ...)
+ TODO: check
+CVE-2026-102339 (Telepresence enables local development against a remote
Kubernetes or ...)
+ TODO: check
+CVE-2026-102337 (Webmin is a web-based system administration tool for
Unix-like servers ...)
+ TODO: check
+CVE-2026-102280 (Sandboxie-Plus is an open source sandbox-based isolation
software for ...)
+ TODO: check
+CVE-2026-100144 (The IVPAY payments WordPress plugin through 1.0.8 does not
sanitise a ...)
+ TODO: check
+CVE-2025-71457 (vtenext 25.02 before 25.02.1 contains an authentication bypass
vulnera ...)
+ TODO: check
+CVE-2025-71456 (vtenext before 25.02.2 contains an SQL injection vulnerability
that al ...)
+ TODO: check
+CVE-2025-71455 (vtenext before 25.02.2 contains a session identifier
disclosure vulner ...)
+ TODO: check
+CVE-2025-71454 (vtenext before 25.02.2 contains a cross-site request forgery
protectio ...)
+ TODO: check
+CVE-2025-71453 (vtenext before 25.02.2 contains a reflected cross-site
scripting vulne ...)
+ TODO: check
+CVE-2025-66368 (Incorrect handling of SDP payload leads to a Denial of Service)
+ TODO: check
+CVE-2025-66367 (Improper handling of NAS DLTransport messages may lead to a
baseband c ...)
+ TODO: check
+CVE-2025-66366 (Incorrect handling of unauthenticated downlink RRCSetup
messages can c ...)
+ TODO: check
+CVE-2025-66365 (Incorrect handling of SIP packets leads to baseband crashes)
+ TODO: check
+CVE-2025-66364 (Continuously sending control\u2011plane messages causes the
baseband t ...)
+ TODO: check
+CVE-2025-15702 (The Cloud Blocks WordPress plugin through 1.1.8 does not
perform any a ...)
+ TODO: check
+CVE-2025-15701 (The Easy Social Icons WordPress plugin before 4.0.3 does not
sanitise ...)
+ TODO: check
CVE-2026-118517
- symfony 7.4.23+dfsg-1
CVE-2026-118515
@@ -634,9 +1130,9 @@ CVE-2026-82155 (Dell OS Recovery tool versions, prior to
2.4.4, contain a use of
NOT-FOR-US: Dell / EMC
CVE-2026-82154 (Dell OS Recovery tool versions, prior to 2.4.4, contain a use
of Hard- ...)
NOT-FOR-US: Dell / EMC
-CVE-2026-80335 (In the bootloader download module, there is a possible
out-of-bounds w ...)
+CVE-2026-80335 (Memory Corruption when processing firmware update data in
Download mod ...)
NOT-FOR-US: Unisoc
-CVE-2026-79405 (In Modem Firmware, there is a possible system crash due to
improper in ...)
+CVE-2026-79405 (Transient DOS when processing a malformed NR RRC configuration
message ...)
NOT-FOR-US: Unisoc
CVE-2026-77779 (ManageEngine Key Manager Plus versions before 7151 were
vulnerable to ...)
NOT-FOR-US: Zoho
@@ -13534,48 +14030,51 @@ CVE-2026-116162 (Parse Server before 8.6.104 and
9.0.0 before 9.10.5-alpha.5 sav
CVE-2026-116161 (Parse Server before 8.6.103 and 9.0.0 before 9.10.5-alpha.4
contains a ...)
NOT-FOR-US: Parse Server
CVE-2026-116160 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a heap-b ...)
- {DLA-4875-1}
+ {DSA-6611-1 DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6p6q-wfrv-ffhh
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/09b961e05cdb7caeb923e1736caa340ac26c84ea
(7.1.2-33)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/26c52536a73ae1056f97de62823e1ce7cafb27dc
(6.9.13-58)
CVE-2026-116159 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a memory ...)
- {DLA-4875-1}
+ {DSA-6611-1 DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-c2qq-jqw7-q4mx
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/68168e6e5617e4cc478452777586e408f542362b
(7.1.2-33)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/31c2db9159943c15c55b6afa17c352f45f41652f
(6.9.13-58)
CVE-2026-116158 (ImageMagick before 7.1.2-33 contains a memory leak
vulnerability in th ...)
+ {DSA-6611-1}
- imagemagick 8:7.1.2.33+dfsg1-1
[bookworm] - imagemagick <not-affected> (vulnerable code not present)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-m938-565c-h9qf
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/8980924dff771df8286cd5311ba0d2c9ef1902ca
(7.1.2-33)
NOTE: im7 only see
https://github.com/ImageMagick/ImageMagick6/issues/486#issuecomment-6541983797
CVE-2026-116157 (ImageMagick before 7.1.2-33 contains a memory leak
vulnerability in Pe ...)
- {DLA-4875-1}
+ {DSA-6611-1 DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pj4h-g4pf-66v3
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/eef3af56fbc2dc607e185b8565d695a8d8032d73
(7.1.2-33)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/fb8842ff7ab351cd85a253c780fbfcf1199d7e4c
(7.1.2-33)
CVE-2026-116156 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a memory ...)
+ {DSA-6611-1}
- imagemagick 8:7.1.2.33+dfsg1-1
[bookworm] - imagemagick <not-affected> (vulnerable code introduced
later)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7r5g-p7ff-jgcp
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/9108482a07ca08620021853a14133b9bc6e77054
(7.1.2-33)
NOTE: operation is im7 only
CVE-2026-116155 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a memory ...)
- {DLA-4875-1}
+ {DSA-6611-1 DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5jf2-9gcp-q234
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/d8d635ecc52aec6553d96dcf5ca34cab81293a17
(7.1.2-33)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/29876f3e3febec4a9806ed5936a66f18971ce319
(6.9.13-58)
CVE-2026-116154 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a memory ...)
- {DLA-4875-1}
+ {DSA-6611-1 DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8ghq-p369-g395
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/33d16f3cf4e0439bba4a874e14c5a3168726ed68
(7.1.2-33)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/41bce657a379675706039b97dffc313806b39d23
(6.9.13-58)
CVE-2026-116153 (ImageMagick before 7.1.2-33 contains a heap buffer overflow
vulnerabil ...)
+ {DSA-6611-1}
- imagemagick 8:7.1.2.33+dfsg1-1
[bookworm] - imagemagick <not-affected> (vulnerable code introduced
later)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7438-vh5v-v52h
@@ -13588,43 +14087,43 @@ CVE-2026-116152 (ImageMagick before 7.1.2-33 contains
a memory leak vulnerabilit
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/62c7876c37347dee0be1872e623650ba59f8a541
(7.1.2-33)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/af510e976301c2516aaa26ea8f88318450eeece2
(7.1.2-33)
CVE-2026-116151 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a memory ...)
- {DLA-4875-1}
+ {DSA-6611-1 DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v9q4-cm37-q2jm
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/b41a6bc92ac778e0459ce500e9d64fb361e29fd5
(7.1.2-33)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/25166220935dc564e7b98f418e3c417a70063a26
(6.9.13-58)
CVE-2026-116150 (ImageMagick before 7.1.2-33 contains a memory leak
vulnerability in th ...)
- {DLA-4875-1}
+ {DSA-6611-1 DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8w9c-hj38-8pf9
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/a63bdd29ebe8439d1bfa51ca4e7890b8b4742560
(7.1.2-33)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/f4454af87ec1be4d6a7f4590c55c1accab779b92
(6.9.13-58)
CVE-2026-116149 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a stack- ...)
- {DLA-4875-1}
+ {DSA-6611-1 DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pwpf-8799-94cj
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/cf40ce974c3f780b7f6913bcff7bec27087c9104
(7.1.2-33)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/9b4d4e065a8518ad90d095ea1a91e6f19c008686
(6.9.13-58)
CVE-2026-116148 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
an injec ...)
- {DLA-4875-1}
+ {DSA-6611-1 DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qq8x-fq3x-43h4
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/59071d53ae13542174f99f81e59cca076bd5d70e
(7.1.2-33)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/99212a03987a09e7945ff379f06a4f33f673baa2
(6.9.13-58)
CVE-2026-116147 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a null p ...)
- {DLA-4875-1}
+ {DSA-6611-1 DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v5f5-4v9x-p3f2
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/d4069fe50be320cf7ab25261e516b176f36fc02f
(7.1.2-33)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/09fe506ea85e6808e50d8902e2fcc13e5b8ffcdb
(6.9.13-58)
CVE-2026-116146 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a memory ...)
- {DLA-4875-1}
+ {DSA-6611-1 DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j657-rmv3-4m94
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/64645a7e72cf597de471dce016f3496c1e29c17a
(7.1.2-33)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/118209bf0db6024e60a2aac498a6da0bd519aa7d
(6.9.13-58)
CVE-2026-116145 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 contains
a securi ...)
- {DLA-4875-1}
+ {DSA-6611-1 DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4wfv-467j-fqh9
NOTE: Fixed by: [1/3]
https://github.com/ImageMagick/ImageMagick/commit/a75aab27367c4a0e57e137eb6cc5369001c85aec
(7.1.2-33)
@@ -13633,32 +14132,34 @@ CVE-2026-116145 (ImageMagick before 6.9.13-58 and 7.x
before 7.1.2-32 contains a
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/04579d04ae3d53df87af858c5ee7a6e815794a51
(6.9.13-58)
NOTE: See CVE-2026-105083
CVE-2026-116144 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
uncontro ...)
- {DLA-4875-1}
+ {DSA-6611-1 DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-x258-xjqf-6j3f
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/8911876f1e1e8f69cf1c1dd8f9a69685c8b776ae
(7.1.2-33)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/249ceda100c543c08fc4431246d9b07f83146425
(6.9.13-58)
CVE-2026-116143 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a policy ...)
- {DLA-4875-1}
+ {DSA-6611-1 DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-fp46-842c-2v83
NOTE: Fixed by: [1/2]
https://github.com/ImageMagick/ImageMagick/commit/3d96f305edff25c2ce6792c72d5f6987c8a5a961
(7.1.2-33)
NOTE: Fixed by: [2/2]
https://github.com/ImageMagick/ImageMagick/commit/e3812ff1c97ba2adf0bb907a4598a272e606a49a
(7.1.2-33)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/ebd672d1966858eb21a5c31afcbc648642e74a14
(6.9.13-58)
CVE-2026-116142 (ImageMagick before 7.1.2-33 contains a heap buffer over-read
vulnerabi ...)
+ {DSA-6611-1}
- imagemagick 8:7.1.2.33+dfsg1-1
[bookworm] - imagemagick <not-affected> (vulnerable code introduced
later)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5222-mhv9-26rg
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/5690b36dae2b6277054ca163542fb69ed570e3d9
(7.1.2-33)
NOTE: Introduced by:
https://github.com/ImageMagick/ImageMagick/commit/78cf68c268edd4fffae5a7e17e87800bfd601f7c
(7.0.10-4)
CVE-2026-116141 (ImageMagick before 7.1.2-33 contains a policy bypass
vulnerability in ...)
+ {DSA-6611-1}
- imagemagick 8:7.1.2.33+dfsg1-1
[bookworm] - imagemagick <not-affected> (vulnerable code introduced
later; no uhdr coder)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h3qx-937j-245g
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/d1402c213c06d06f2e006e9ff433050774093677
(7.1.2-33)
NOTE: UHDR coder introduced by:
https://github.com/ImageMagick/ImageMagick/commit/4b85373fcd4de75118c0bb62266b66f8245906ec
(7.1.1-30)
CVE-2026-116140 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33
incorrectly parse ...)
- {DLA-4875-1}
+ {DSA-6611-1 DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-528x-2384-jmxp
NOTE: Fixed by: [1/4]
https://github.com/ImageMagick/ImageMagick/commit/453568d7d98a409681374ffacaf2edf2cd53c1f3
(7.1.2-33)
@@ -28824,6 +29325,7 @@ CVE-2026-109686 (Deserialization of Untrusted Data
vulnerability in Link Whisper
CVE-2026-109685 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-109449 (InSymfony Expression Language versions prior to 5.4.54,
6.4.48, 7.4.21 ...)
+ {DSA-6612-1}
- symfony 7.4.21+dfsg-1
NOTE:
https://github.com/symfony/symfony/security/advisories/GHSA-7rpj-w9pf-39rr
NOTE:
https://symfony.com/blog/cve-2026-109449-unbounded-nesting-in-the-expression-parser-lets-untrusted-expressions-crash-the-process
@@ -28831,6 +29333,7 @@ CVE-2026-109449 (InSymfony Expression Language versions
prior to 5.4.54, 6.4.48,
NOTE: https://github.com/symfony/symfony/pull/66720
NOTE: https://github.com/symfony/symfony/pull/66723
CVE-2026-109413 (In Symfony YAML prior to versions5.4.54,6.4.45,7.4.18,
and8.1.6,Yaml\P ...)
+ {DSA-6612-1}
- symfony 7.4.18+dfsg-1
NOTE:
https://github.com/symfony/symfony/security/advisories/GHSA-2v3c-qxhr-7vpv
NOTE:
https://symfony.com/blog/cve-2026-109413-unbounded-recursion-in-the-yaml-inline-lexer-lets-a-single-document-crash-the-process
@@ -28858,6 +29361,7 @@ CVE-2026-108116 (In Progress Kendo UI for jQuery prior
to v2026.3.1015, speciall
CVE-2026-108092 (The Blog2Social \u2013 Social Media Auto Post & Scheduler
plugin for W ...)
NOT-FOR-US: WordPress plugin
CVE-2026-108082 (Symfony is a PHP framework for web and console applications
and a set ...)
+ {DSA-6612-1}
- symfony 7.4.19+dfsg-1
NOTE:
https://github.com/symfony/symfony/security/advisories/GHSA-r925-mgvr-h9cc
NOTE:
https://symfony.com/blog/cve-2026-108082-redos-in-headerutils-split-reachable-through-the-cache-control-request-header
@@ -35303,7 +35807,7 @@ CVE-2026-109966 (yt-dlp-web-ui through 4.0.0 contains
an argument injection vuln
CVE-2026-109965 (Serena before 2.0.0 contains an improper link resolution
vulnerability ...)
NOT-FOR-US: Serena
CVE-2026-109964 (ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap
buffer under ...)
- {DLA-4875-1}
+ {DSA-6611-1 DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mqmp-r5jh-jx7w
NOTE:
https://github.com/ImageMagick/ImageMagick/commit/63dde0cf281383ab69432b88305f7dcd6a8ce900
(7.1.2-33)
@@ -36318,38 +36822,38 @@ CVE-2026-109781 (Denial-of-service in the Printing:
Output component. This vulne
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109781
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109781
CVE-2026-102704 ([This CNA information record relates to multiple CVEs; the
text explai ...)
- {DSA-6610-1}
+ {DSA-6610-1 DLA-4881-1}
- xen 4.20.4+63-g7abfd2bce2-1
NOTE: https://xenbits.xen.org/xsa/advisory-523.html
CVE-2026-102703 ([This CNA information record relates to multiple CVEs; the
text explai ...)
- {DSA-6610-1}
+ {DSA-6610-1 DLA-4881-1}
- xen 4.20.4+63-g7abfd2bce2-1
NOTE: https://xenbits.xen.org/xsa/advisory-523.html
CVE-2026-102699 ([This CNA information record relates to multiple CVEs; the
text explai ...)
- {DSA-6571-1}
+ {DSA-6571-1 DLA-4881-1}
- xen 4.20.4+39-gf1e1321c87-1
NOTE: https://xenbits.xen.org/xsa/advisory-519.html
CVE-2026-102702 ([This CNA information record relates to multiple CVEs; the
text explai ...)
- {DSA-6571-1}
+ {DSA-6571-1 DLA-4881-1}
- xen 4.20.4+39-gf1e1321c87-1
NOTE: https://xenbits.xen.org/xsa/advisory-519.html
CVE-2026-102701
NOT-FOR-US: tapdisk
NOTE: https://xenbits.xen.org/xsa/advisory-521.html
CVE-2026-102700 (With its original introduction, GNTTAB_cache_flush was made
available ...)
- {DSA-6571-1}
+ {DSA-6571-1 DLA-4881-1}
- xen 4.20.4+39-gf1e1321c87-1
NOTE: https://xenbits.xen.org/xsa/advisory-520.html
CVE-2026-79611 (For XSA-308 logic was introduced, as VMX VMEntry checks do not
like th ...)
- {DSA-6571-1}
+ {DSA-6571-1 DLA-4881-1}
- xen 4.20.4+39-gf1e1321c87-1
NOTE: https://xenbits.xen.org/xsa/advisory-518.html
CVE-2026-79610 (XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes
racing cer ...)
- {DSA-6571-1}
+ {DSA-6571-1 DLA-4881-1}
- xen 4.20.4+39-gf1e1321c87-1
NOTE: https://xenbits.xen.org/xsa/advisory-517.html
CVE-2026-79609 (XPTI (Xen Page Table Isolation) was introduced to mitigate
Meltdown (C ...)
- {DSA-6571-1}
+ {DSA-6571-1 DLA-4881-1}
- xen 4.20.4+39-gf1e1321c87-1
NOTE: https://xenbits.xen.org/xsa/advisory-516.html
CVE-2026-79608 (The workaround for XSA-433 (Zenbleed, CVE-2023-20593) was
later re-wor ...)
@@ -37438,61 +37942,67 @@ CVE-2026-109284 (Open WebUI from 0.11.0 before 0.11.4
contains an improper autho
CVE-2026-109283 (Open WebUI from 0.11.1 before 0.11.4 contains an
authorization bypass ...)
NOT-FOR-US: Open WebUI
CVE-2026-109282 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a type c ...)
+ {DSA-6611-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8xmr-6q99-c4x8
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/af7b85012e62fa65393277790b96c56a98d882b6
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/a17cfd15af1038e3ef179016b41ad88e936b4487
(6.9.13-57)
CVE-2026-109281 (ImageMagick 7.1.0-21 before 7.1.2-32 contains a heap buffer
over-read ...)
+ {DSA-6611-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
[bookworm] - imagemagick <not-affected> (vulnerable code introduced
later)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cvgp-q487-j22w
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/0e82a4d0b294581186ed7b3e1dce59c858a73dba
(7.1.2-32)
CVE-2026-109280 (ImageMagick 7.1.0-20 before 7.1.2-32 contains a use after
free vulnera ...)
+ {DSA-6611-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
[bookworm] - imagemagick <not-affected> (vulnerable code introduced
later)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v2x3-wpmg-c4w6
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/fb743d60700c9bc350c3d2a0b48b998bdabc466c
(7.1.2-32)
CVE-2026-109279 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks
proper sync ...)
- {DLA-4875-1}
+ {DSA-6611-1 DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8x3v-wr32-qqh4
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/12db6f04e895deae4537ead10c771a244607794a
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/9ddc71abea5cbe7d18164fa0f0077a105cab514f
(6.9.13-57)
CVE-2026-109278 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a memory ...)
- {DLA-4875-1}
+ {DSA-6611-1 DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9f9w-84g3-vp2c
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/15892fc0dc050a3693e28a214478a8d8488d648c
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/0d2544e641848462e8b469c06cde69d7d77c35c6
(6.9.13-57)
CVE-2026-109277 (ImageMagick before 7.1.2-32 contains a policy bypass
vulnerability in ...)
+ {DSA-6611-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
[bookworm] - imagemagick <not-affected> (vulnerable code not present,
script was introduced in imagemagick7)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vv56-wmgw-m36w
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/ce92ae07c2ca2c20c131eaf6da6da734c1cafce0
(7.1.2-32)
CVE-2026-109276 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
an incom ...)
- {DLA-4875-1}
+ {DSA-6611-1 DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f983-243h-9x4r
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/b2d579d20cc503185b6e8b0bc2dfb520b7bce58a
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/3875281ca0c5aa67b2bf0454725abf177c706b3b
(6.9.13-57)
CVE-2026-109275 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a code i ...)
- {DLA-4875-1}
+ {DSA-6611-1 DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-233r-2p53-wqf5
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/6cfb8d8c65bb0aba49903589b444f45ea074a226
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/c9e9c3a84945d698e8c4e849ec858dc914397181
(6.9.13-57)
CVE-2026-109274 (ImageMagick before 7.1.2-32 contains a time-of-check
time-of-use symli ...)
+ {DSA-6611-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
[bookworm] - imagemagick <not-affected> (vulnerable code not present,
script was introduced in imagemagick7)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7q74-r26w-fwcx
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/9e789499e67dbf5c4ee9fe1b72690738c799ec73
(7.1.2-32)
CVE-2026-109273 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
an infor ...)
- {DLA-4875-1}
+ {DSA-6611-1 DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5j8x-vq8c-vrp9
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/5a5c2e51948fcc5d85b8d832938e2c1b4db4a699
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/a32215ba7a193f2bc896ba6ed4be4013cc06e22b
(6.9.13-57)
CVE-2026-109272 (ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer
dereferen ...)
+ {DSA-6611-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
[bookworm] - imagemagick <not-affected> (vulnerable code introduced
later)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-58h4-rwr6-wj72
@@ -37507,54 +38017,56 @@ CVE-2026-109271 (ImageMagick 7.1.2-30 before 7.1.2-32
contains a use after free
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/2ed1b96b9bc71434f0c4e82e3c63fec029c684c6
(7.1.2-32)
NOTE: wbinfo coder introduced by:
https://github.com/ImageMagick/ImageMagick/commit/5311b7a803586214ad18c84f949471cad8d7e1fd
(7.1.2-30)
CVE-2026-109270 (ImageMagick before 7.1.2-32 contains a memory leak
vulnerability in th ...)
+ {DSA-6611-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
[bookworm] - imagemagick <not-affected> (vulnerable code introduced
later)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f32c-2v6j-wvh5
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/da4cfd78a2ceea4cf54207834f9d60c1b9c38797
(7.1.2-32)
NOTE: im7 only:
https://github.com/ImageMagick/ImageMagick6/issues/483#issuecomment-6517576657
CVE-2026-109269 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
an infor ...)
- {DLA-4875-1}
+ {DSA-6611-1 DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xxrx-rjp3-27rj
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/aa104ff2e408bea23828e7a7a346f9080da4104b
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/acf52477cf05c5ff9c8315d44043589a5190a408
(6.9.13-57)
CVE-2026-109268 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a use af ...)
- {DLA-4875-1}
+ {DSA-6611-1 DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j39j-wmxg-j8mv
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/3285d692ebf200e9cbeff59d1ccc00caab99ad54
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/966e227a1a8b520ea1652e2eb3ca78b08d3206f5
(6.9.13-57)
CVE-2026-109267 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a stack ...)
- {DLA-4875-1}
+ {DSA-6611-1 DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-462x-739v-qvq2
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/507aee2308046b25e251d0be1a5371327bb79683
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/c10823904b251d07fe79346a7136b0af295d451b
(6.9.13-57)
CVE-2026-109266 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
an XML i ...)
- {DLA-4875-1}
+ {DSA-6611-1 DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3429-f84m-8qhw
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/45bb7328b36c163234f5ccb7f1d494b7c4c8c775
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/30499e67801ee8a0e70817d28b861b8616d72555
(6.9.13-57)
CVE-2026-109265 (ImageMagick 7.1.1-7 before 7.1.2-32 contains a heap buffer
over-read v ...)
+ {DSA-6611-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
[bookworm] - imagemagick <not-affected> (vulnerable method introduced
in im7)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jph3-37cg-79wg
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/7605c7619da77a5ff1ccf4ec159f3ec782c6bda7
(7.1.2-32)
CVE-2026-109264 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
uncontro ...)
- {DLA-4875-1}
+ {DSA-6611-1 DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pmqj-84pr-qc7c
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/6ff963c14ccb5fefb4eb8654c8b0219033df2b20
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/d4f06dcca7ad99d639af85bc347ad9fdfdcec8e2
(6.9.13-57)
CVE-2026-109263 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a memory ...)
- {DLA-4875-1}
+ {DSA-6611-1 DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-69jx-j2x2-g5w4
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/493fab0b6072787e929184761b6ab6405a9486a2
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/3e2075fe4a148ce33e7d749a99898e55a6cad7b5
(6.9.13-57)
CVE-2026-109262 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a memory ...)
- {DLA-4875-1}
+ {DSA-6611-1 DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w288-jj5x-hhvp
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/2eff6be3785d980bb5190244ad432fe6282d29e3
(7.1.2-32)
@@ -37566,13 +38078,13 @@ CVE-2026-109261 (ImageMagick before 6.9.13-57 and 7.x
before 7.1.2-32 contains a
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/1c7763266cfedc635005a965169bc2ddcc650221
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/93aa075f0fa5a6ae6a83a63acc7c84283aa6d31b
(6.9.13-57)
CVE-2026-109260 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a memory ...)
- {DLA-4875-1}
+ {DSA-6611-1 DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hvwf-wmm6-hvc3
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/fd1b9c85f2634e34034d39016ed7542ac0a19930
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/55346382cebdf5c5fa6c544a7df7ae4910ffb090
(6.9.13-57)
CVE-2026-109259 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
an unini ...)
- {DLA-4875-1}
+ {DSA-6611-1 DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h499-883p-vph8
NOTE: Fixed by: [1/4]
https://github.com/ImageMagick/ImageMagick/commit/df199b79f0a1c87ca009e431f03cb387af160f77
(7.1.2-32)
@@ -37581,6 +38093,7 @@ CVE-2026-109259 (ImageMagick before 6.9.13-57 and 7.x
before 7.1.2-32 contains a
NOTE: Fixed by: [4/4]
https://github.com/ImageMagick/ImageMagick/commit/5f5fe85aa513d71c5cc92a81fa7c23397476cc5f
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/9c7c5f9f5fcc9e23f0a8fda830cecfbb3310fbd9
(6.9.13-57)
CVE-2026-109258 (ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid
memory free v ...)
+ {DSA-6611-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
[bookworm] - imagemagick <not-affected> (vulnerable code introduded
later)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pv8x-gq6w-gp4r
@@ -37900,7 +38413,7 @@ CVE-2026-105274 (Improper Handling of Highly Compressed
Data (Data Amplification
NOTE: Introduced by:
https://github.com/hexpm/hex/commit/671f695ac548ed01f5828c2a739ecaa942b21007
(v2.1.0)
NOTE: Fixed by:
https://github.com/hexpm/hex/commit/d8b60eee97abb119d525306f048969a217d793a5
(v2.5.2)
CVE-2026-105081 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not
properly ...)
- {DLA-4875-1}
+ {DSA-6611-1 DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-79p5-w6jv-r997
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/c73f7913f72b8d97fe89f4094eefdc8d34edf5a9
(7.1.2-33)
@@ -38036,7 +38549,7 @@ CVE-2026-121387 (FreeRDP 2.0.0 before 3.32.2 contains
an out-of-bounds read vuln
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-wg7g-gx9g-r96c
-CVE-2026-121950 [GHSA-f53w-3364-jr35]
+CVE-2026-121950 (FreeRDP before 3.32.2 does not check the product of surface
dimensions ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-f53w-3364-jr35
@@ -38068,7 +38581,7 @@ CVE-2026-121396 (FreeRDP clients from 3.0.0 before
3.32.2 built with verbose Win
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-6p3w-fv52-cf24
-CVE-2026-121951 [GHSA-4qq4-qwxq-49m8]
+CVE-2026-121951 (FreeRDP 3.0.0 before 3.32.2 server-side RDP peer input
parsing skips t ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4qq4-qwxq-49m8
@@ -38092,7 +38605,7 @@ CVE-2026-121401 (FreeRDP before 3.32.2 contains a
denial of service vulnerabilit
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8rjm-m7xg-mg6m
-CVE-2026-121952 [GHSA-xc85-4mqc-xgcx]
+CVE-2026-121952 (FreeRDP before 3.32.2 has an out-of-bounds write in the proxy
because ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-xc85-4mqc-xgcx
@@ -38100,31 +38613,31 @@ CVE-2026-XXXX [GHSA-v85m-wg84-5ffh]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-v85m-wg84-5ffh
-CVE-2026-121953 [GHSA-6wqx-rv3q-vcxp]
+CVE-2026-121953 (FreeRDP before 3.32.2 has a use-after-free in the client's
rdpgfx dyna ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-6wqx-rv3q-vcxp
-CVE-2026-121954 [GHSA-fg78-v8j5-8697]
+CVE-2026-121954 (FreeRDP before 3.32.2 has a heap out-of-bounds write in the
planar cod ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-fg78-v8j5-8697
-CVE-2026-121955 [GHSA-983v-jp34-f3fm]
+CVE-2026-121955 (FreeRDP before 3.32.2 contains a use-after-free vulnerability
in Emula ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-983v-jp34-f3fm
-CVE-2026-121956 [GHSA-2557-79qc-6gfr]
+CVE-2026-121956 (FreeRDP before 3.32.2 contains a double free in the WinPR
Kerberos SSP ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-2557-79qc-6gfr
-CVE-2026-121957 [GHSA-xjhw-2r55-m95g]
+CVE-2026-121957 (FreeRDP before 3.32.2 contains a use-after-free vulnerability
that all ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-xjhw-2r55-m95g
-CVE-2026-121958 [GHSA-m59q-wm7v-mp57]
+CVE-2026-121958 (FreeRDP through 3.32.1 has a heap out-of-bounds write in the
RDPGFX cl ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-m59q-wm7v-mp57
-CVE-2026-121959 [GHSA-x26g-fp9v-c2pg]
+CVE-2026-121959 (FreeRDP before 3.32.2 contains an infinite loop vulnerability
in webso ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x26g-fp9v-c2pg
@@ -38152,11 +38665,11 @@ CVE-2026-121407 (FreeRDP before 3.32.2 contains a
denial of service vulnerabilit
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x8vp-ff7m-294g
-CVE-2026-121960 [GHSA-3pg4-5r42-wxvj]
+CVE-2026-121960 (FreeRDP before 3.32.2 contains a denial of service
vulnerability in th ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-3pg4-5r42-wxvj
-CVE-2026-121961 [GHSA-qw7w-hhxq-763c]
+CVE-2026-121961 (FreeRDP before 3.32.2 contains a use-after-free vulnerability
in the f ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qw7w-hhxq-763c
@@ -38168,7 +38681,7 @@ CVE-2026-121409 (FreeRDP before 3.32.2 contains a
denial of service vulnerabilit
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-3hf9-w6hr-hf9j
-CVE-2026-121962 [GHSA-j536-qc58-pmf8]
+CVE-2026-121962 (FreeRDP before 3.32.2 contains a heap buffer overflow in
transport_def ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-j536-qc58-pmf8
@@ -38176,7 +38689,7 @@ CVE-2026-121410 (FreeRDP before 3.32.2 contains a
denial of service vulnerabilit
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-fqw6-jf2h-6fj6
-CVE-2026-121963 [GHSA-cx9c-q4jc-wm6c]
+CVE-2026-121963 (FreeRDP before 3.32.2 contains a use-after-free vulnerability
in the a ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cx9c-q4jc-wm6c
@@ -38188,7 +38701,7 @@ CVE-2026-XXXX [GHSA-jqf4-4p68-4p43]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jqf4-4p68-4p43
-CVE-2026-121964 [GHSA-q82v-5wjg-6h57]
+CVE-2026-121964 (FreeRDP before 3.32.2 contains a heap-based buffer overflow
in the RD ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q82v-5wjg-6h57
@@ -47097,7 +47610,7 @@ CVE-2026-11399 (The Helpdesk Support Ticket System for
WooCommerce plugin for Wo
CVE-2026-105090 (Formbricks before 5.4.4 and 6 before 6.0.1 allows stored XSS.
The surv ...)
NOT-FOR-US: Formbricks
CVE-2026-105083 (ImageMagick before 7.1.2-32 and 6.9.13-57 contains a policy
bypass vul ...)
- {DLA-4875-1}
+ {DSA-6611-1 DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1149969)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jjp4-3fwf-393j
NOTE: Fixed by: [1/5]
https://github.com/ImageMagick/ImageMagick/commit/1926ccf119141c26274c120d1899dffae19b0c71
(7.1.2-32)
@@ -83532,15 +84045,15 @@ CVE-2026-79605
NOT-FOR-US: Xen Tapdisk
NOTE: https://xenbits.xen.org/xsa/advisory-513.html
CVE-2026-79604
- {DSA-6571-1}
+ {DSA-6571-1 DLA-4881-1}
- xen 4.20.4+39-gf1e1321c87-1
NOTE: https://xenbits.xen.org/xsa/advisory-512.html
CVE-2026-79603 (x86 PV guests can free memory pages while still keeping a
stale TLB en ...)
- {DSA-6571-1}
+ {DSA-6571-1 DLA-4881-1}
- xen 4.20.4+39-gf1e1321c87-1
NOTE: https://xenbits.xen.org/xsa/advisory-511.html
CVE-2026-79602 (A guest with a PCI device assigned that has at least a BAR on
the IO p ...)
- {DSA-6571-1}
+ {DSA-6571-1 DLA-4881-1}
- xen 4.20.4+39-gf1e1321c87-1
NOTE: https://xenbits.xen.org/xsa/advisory-510.html
CVE-2026-79577 (An issue in the /cas/login component of sso-master v1.0.0
allows attac ...)
@@ -85385,7 +85898,7 @@ CVE-2026-62646 (A vulnerability has been identified in
Reyrolle 7SR5 (All versio
CVE-2026-62645 (A vulnerability has been identified in Reyrolle 7SR5 (All
versions < V ...)
NOT-FOR-US: Siemens
CVE-2026-62437 (When guests are terminated, various pieces of cleanup need
carrying ou ...)
- {DSA-6571-1}
+ {DSA-6571-1 DLA-4881-1}
- xen 4.20.4+39-gf1e1321c87-1
NOTE: https://xenbits.xen.org/xsa/advisory-509.html
CVE-2026-61517 (Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an OS
command ...)
@@ -121393,7 +121906,7 @@ CVE-2026-6368 (Calling wordexp with WRDE_APPEND in
the GNU C Library version 2.0
NOTE:
https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2026-0014
CVE-2026-66915 (Joomla Extension - fabrikar.com - Remote code execution in
Fabrik < 4. ...)
NOT-FOR-US: Joomla
-CVE-2026-122032
+CVE-2026-122032 (SPIP before 4.4.29 contains a SQL injection vulnerability
that allows ...)
- spip 4.4.29+dfsg-1
NOTE:
https://blog.spip.net/Mise-a-jour-critique-de-securite-sortie-de-SPIP-4-4-29.html
CVE-2026-XXXX [RCE Fixed in 4.4.27]
@@ -190346,6 +190859,7 @@ CVE-2026-46626
- symfony 7.4.12+dfsg-1
NOTE:
https://symfony.com/blog/cve-2026-46626-symfonyruntime-cve-2024-50340-patch-bypass-via-parse-str-sapi-argv-mismatch
CVE-2026-45070 (Symfony is a PHP framework for web and console applications
and a set ...)
+ {DSA-6612-1}
- symfony 7.4.22+dfsg-1
NOTE:
https://symfony.com/blog/cve-2026-45070-email-header-injection-via-non-token-characters-in-mime-parameter-names
NOTE: Fixed by:
https://github.com/symfony/symfony/commit/8cc149f5d7dddcb02b17f8d0d3fe9b24
(v8.1.10,v7.4.22,v6.4.49,v5.4.55)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a01e604d3efd44a56c4699d5011a83744d335da5
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a01e604d3efd44a56c4699d5011a83744d335da5
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
