diff --git a/documentation/security-watch/state.json b/documentation/security-watch/state.json index 609a4c87..b1da3f75 100644 --- a/documentation/security-watch/state.json +++ b/documentation/security-watch/state.json @@ -112,13 +112,13 @@ }, "dooplex:codewithcj/sparkyfitness_server|release:CodeWithCJ/SparkyFitness@v1.10.0": { "first": "2026-10-29", - "last_mailed": "2026-10-29", + "last_mailed": "2026-11-05", "program": "codewithcj/sparkyfitness_server v1.9.0 (workout-system/sparkyfitness.yaml)", "summary": "1 for CVE-2026-111497 by @nalvazhvu in #3111" }, "dooplex:codewithcj/sparkyfitness|release:CodeWithCJ/SparkyFitness@v1.10.0": { "first": "2026-10-29", - "last_mailed": "2026-10-29", + "last_mailed": "2026-11-05", "program": "codewithcj/sparkyfitness v1.9.0 (workout-system/sparkyfitness.yaml)", "summary": "1 for CVE-2026-111497 by @nalvazhvu in #3111" }, @@ -1951,6 +1951,12 @@ "silent": "first read after the seed", "summary": "Execute Command Node in n8n Allows Authenticated Users to Run Arbitrary Commands on Host" }, + "privatebin/pdo|GHSA-6vvp-q86m-cp8q": { + "first": "2026-11-05", + "last_mailed": "2026-11-05", + "program": "privatebin/pdo 2.1.0 (privatebin)", + "summary": "SVG attachment preview runs same-origin script in the PrivateBin client" + }, "privatebin/pdo|GHSA-c4gc-8mcm-hh65": { "first": "2026-10-30", "last_mailed": "2026-10-30", @@ -1963,6 +1969,12 @@ "program": "privatebin/pdo 2.1.0 (privatebin)", "summary": "Unauthenticated encrypted comment replay allows persistent discussion reparenting" }, + "privatebin/pdo|GHSA-w873-3ghv-hmh6": { + "first": "2026-11-05", + "last_mailed": "2026-11-05", + "program": "privatebin/pdo 2.1.0 (privatebin)", + "summary": "GHSA-w873-3ghv-hmh6 fix in 2" + }, "rommapp/romm|CVE-2026-111497": { "first": "2026-10-28", "last_mailed": "2026-11-04", @@ -2115,19 +2127,6 @@ "python": null, "unchecked": [] }, - "sha256:13290e2f04bfd98cf8fc7e8d216fb76b2b2d12373d4923b859cd41c2d984fde8": { - "apk": { - "brotli-libs": "1.2.0-r1" - }, - "brotli": null, - "brotlicffi": null, - "digest": "sha256:40e9b3aa6bc2fb28cfdeeeefe4f1b838d42fd78d750d3c90d1715f3461fd0faf", - "dpkg": {}, - "env": {}, - "node": null, - "python": null, - "unchecked": [] - }, "sha256:19764751d501495b021530c9426f25d8f9f8748dc38ab3ba48eb62d7df2cd92e": { "apk": {}, "brotli": null, @@ -2867,6 +2866,19 @@ "python": null, "unchecked": [] }, + "sha256:726853be6043d213e341ba85a870dea15001fc7e1392d048c40bf7e9cc6e96a5": { + "apk": { + "brotli-libs": "1.2.1-r0" + }, + "brotli": null, + "brotlicffi": null, + "digest": "sha256:6c6d8f13d9d7573e931bb3ef0831709e16578ea647747e530fa7ea0494aa7ca2", + "dpkg": {}, + "env": {}, + "node": null, + "python": null, + "unchecked": [] + }, "sha256:7837f8148cc6db5e3e9a8df199912950adaee66898ebad4949d9dbb2f30aa02b": { "apk": {}, "brotli": null, @@ -3600,21 +3612,6 @@ "python": null, "unchecked": [] }, - "sha256:c65ecfe613b539ac74c62a4c3b2c27e8f8a6076384c8f27e8a3c0f3be17cc385": { - "apk": {}, - "brotli": null, - "brotlicffi": null, - "digest": "sha256:5bbe76a31abbe0f1449d7820e550131c020b097c24d3bcfc5ad1231779982c1c", - "dpkg": { - "libbrotli1": "1.1.0-2+deb13u1", - "python3": "3.13.5-1", - "python3.13": "3.13.5-2+deb13u5" - }, - "env": {}, - "node": null, - "python": null, - "unchecked": [] - }, "sha256:c6c7ae1d5dfdcb094ad344ed68ccffc26635c9c6be80965664c33baf064b0515": { "apk": {}, "brotli": null, @@ -3778,6 +3775,21 @@ "python": null, "unchecked": [] }, + "sha256:d9fa6e7ba43678ee1e5d1617007db9a134612032a74e2d86b44a9f582f1564cc": { + "apk": {}, + "brotli": null, + "brotlicffi": null, + "digest": "sha256:5bbe76a31abbe0f1449d7820e550131c020b097c24d3bcfc5ad1231779982c1c", + "dpkg": { + "libbrotli1": "1.1.0-2+deb13u1", + "python3": "3.13.5-1", + "python3.13": "3.13.5-2+deb13u5" + }, + "env": {}, + "node": null, + "python": null, + "unchecked": [] + }, "sha256:dbbc38ea21103cefb50396340cd88afec779c7e070b0a7bf5a75b4ce46651d3f": { "apk": { "brotli-libs": "1.2.0-r1"