Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
82eed7af by Salvatore Bonaccorso at 2026-08-26T13:33:21+02:00
Process one NFU
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2639,7 +2639,7 @@ CVE-2026-76845 (adm-zip 0.5.9 through 0.6.0 follows
symbolic links at the extrac
CVE-2026-76844 (webpack-dev-middleware resolves a request to a local file in
getFilena ...)
NOT-FOR-US: Node webpack-dev-middleware
CVE-2026-76843 (The official Flair wheels for 0.15.0 and 0.15.1 still contain
flair/mo ...)
- TODO: check
+ NOT-FOR-US: Flair
CVE-2026-76842 (The Mercado Pago Node.js SDK interpolates caller-supplied
identifiers ...)
NOT-FOR-US: Mercado Pago Node.js SDK
CVE-2026-76841 (Xinference loads models with Hugging Face remote code
execution uncond ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/82eed7af1b2dcbf7142db6db0a355de186db0d3c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/82eed7af1b2dcbf7142db6db0a355de186db0d3c
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
