Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
fbc729ee by Salvatore Bonaccorso at 2026-06-23T05:40:56+02:00
Add new python-multipart issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -172,13 +172,24 @@ CVE-2026-53571 (Vite is a frontend tooling framework for
JavaScript. Prior to 8.
CVE-2026-53550 (js-yaml is a JavaScript YAML parser and dumper. Prior to
4.2.0, a craf ...)
TODO: check
CVE-2026-53540 (Python-Multipart is a streaming multipart parser for Python.
Prior to ...)
- TODO: check
+ - python-multipart <unfixed>
+ NOTE:
https://github.com/Kludex/python-multipart/security/advisories/GHSA-v9pg-7xvm-68hf
+ NOTE: https://github.com/Kludex/python-multipart/pull/297
+ NOTE: Fixed by:
https://github.com/Kludex/python-multipart/commit/c814948acf509cef7881fa75c969969b19239bbf
(0.0.31)
CVE-2026-53539 (Python-Multipart is a streaming multipart parser for Python.
Prior to ...)
- TODO: check
+ - python-multipart <unfixed>
+ NOTE:
https://github.com/Kludex/python-multipart/security/advisories/GHSA-5rvq-cxj2-64vf
+ NOTE: Fixed by:
https://github.com/Kludex/python-multipart/commit/d69df35cd2cad9c72794c2c340db646afae957d8
(0.0.30)
+ TODO: check correctness commit
CVE-2026-53538 (Python-Multipart is a streaming multipart parser for Python.
Prior to ...)
- TODO: check
+ - python-multipart <unfixed>
+ NOTE:
https://github.com/Kludex/python-multipart/security/advisories/GHSA-6jv3-5f52-599m
+ NOTE: Fixed by:
https://github.com/Kludex/python-multipart/commit/d69df35cd2cad9c72794c2c340db646afae957d8
(0.0.30)
+ TODO: check correctness commit
CVE-2026-53537 (Python-Multipart is a streaming multipart parser for Python.
Prior to ...)
- TODO: check
+ - python-multipart <unfixed>
+ NOTE:
https://github.com/Kludex/python-multipart/security/advisories/GHSA-vffw-93wf-4j4q
+ NOTE: Fixed by:
https://github.com/Kludex/python-multipart/commit/3506c15ce99cb62faf2d5ceb3c4c1e5800cb843d
(0.0.30)
CVE-2026-52725 (Angular is a development platform for building mobile and
desktop web ...)
TODO: check
CVE-2026-50557 (Angular is a development platform for building mobile and
desktop web ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fbc729eea8418169c05e1be8a89ce7b4aaa61c22
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fbc729eea8418169c05e1be8a89ce7b4aaa61c22
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
