Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f90d833b by Salvatore Bonaccorso at 2026-07-15T22:55:02+02:00
Add CVE-2026-62389/node-ws
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -15,7 +15,9 @@ CVE-2026-62685 (File Browser is a file managing interface for
uploading, deletin
CVE-2026-62683 (File Browser is a file managing interface for uploading,
deleting, pre ...)
NOT-FOR-US: File Browser
CVE-2026-62389 (ws before 8.21.1 contains a memory exhaustion vulnerability in
lib/rec ...)
- TODO: check
+ - node-ws <unfixed>
+ NOTE: https://github.com/websockets/ws/issues/2331
+ NOTE: Fixed by:
https://github.com/websockets/ws/commit/f197ac65140920bdcecdab74bfc69c2d7858e55d
(8.21.1)
CVE-2026-62378 (RustFS Console is a web management console for the RustFS
distributed ...)
NOT-FOR-US: RustFS
CVE-2026-62294 (Flameshot is powerful yet simple to use screenshot software.
Prior to ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f90d833bc53f8bc011aadf934b5f94cd20f4e92e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f90d833bc53f8bc011aadf934b5f94cd20f4e92e
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits