Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2202aab0 by Salvatore Bonaccorso at 2026-07-24T23:07:18+02:00
Add one new node-dompurify issue, CVE-2026-66010
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -35,7 +35,8 @@ CVE-2026-66032 (libssh2 through 1.11.1, fixed in commit
5e47761, contains a doub
CVE-2026-66027 (Suna before 0.9.102 contains a broken access control
vulnerability in ...)
NOT-FOR-US: Suna
CVE-2026-66010 (DOMPurify before 3.4.12 fails to execute afterSanitizeElements
hook fo ...)
- TODO: check
+ - node-dompurify 3.4.12+dfsg-1
+ NOTE:
https://github.com/cure53/DOMPurify/security/advisories/GHSA-c2j3-45gr-mqc4
CVE-2026-66009 (Parse Server versions >= 9.0.0 before 9.10.0-alpha.5 and >=
8.2.2 befo ...)
NOT-FOR-US: Parse Server
CVE-2026-66008 (Parse Server versions >= 9.0.0 before 9.10.0-alpha.6 and >=
8.2.2 befo ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2202aab0d5f749ae79a8658e3c2cbe4362442d52
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2202aab0d5f749ae79a8658e3c2cbe4362442d52
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
