Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
43da507f by Salvatore Bonaccorso at 2026-09-07T22:11:53+02:00
Add CVE-2026-86435/php-league-commonmark
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -71,7 +71,9 @@ CVE-2026-86441 (Affected versions of MISP contain
inconsistent authorization che
CVE-2026-86440 (Affected versions of MISP insufficiently validate URLs used by
dashboa ...)
- misp <itp> (bug #1144317)
CVE-2026-86435 (commonmark versions from 1.5.0 before 2.8.4 contain a denial
of servic ...)
- TODO: check
+ - php-league-commonmark 2.9.0-1
+ NOTE:
https://github.com/thephpleague/commonmark/security/advisories/GHSA-jfm3-95jq-q3rf
+ NOTE:
https://github.com/thephpleague/commonmark/commit/66028124a17ba193da7b11cc3dfda92df21bfbf4
(2.9.0)
CVE-2026-86434 (league/commonmark versions >= 2.0.0 and < 2.8.4 (patched in
2.9.0) con ...)
TODO: check
CVE-2026-86433 (commonmark versions from 1.5.0 before 2.8.4 contain a denial
of servic ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/43da507f6fcf8025b1ac84d4bde41c84b4da099a
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/43da507f6fcf8025b1ac84d4bde41c84b4da099a
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
