admin/felhom.eu
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

security-watch: memory of 2026-11-05 (R-1303). Docs only.

Browse Source
This commit is contained in:
felhom security watch committed 2026-11-05 03:41:34 +00:00
1 parent e57d0c6171
commit 085dc93cea
1 file changed
+42 -30
Download Patch File Download Diff File Expand all files Collapse all files
documentation/security-watch/state.json
+42 -30
View File
@@ -112,13 +112,13 @@
},
"dooplex:codewithcj/sparkyfitness_server|release:CodeWithCJ/SparkyFitness@v1.10.0": {
"first": "2026-10-29",
"last_mailed": "2026-10-29",
"last_mailed": "2026-11-05",
"program": "codewithcj/sparkyfitness_server v1.9.0 (workout-system/sparkyfitness.yaml)",
"summary": "1 for CVE-2026-111497 by @nalvazhvu in #3111"
},
"dooplex:codewithcj/sparkyfitness|release:CodeWithCJ/SparkyFitness@v1.10.0": {
"first": "2026-10-29",
"last_mailed": "2026-10-29",
"last_mailed": "2026-11-05",
"program": "codewithcj/sparkyfitness v1.9.0 (workout-system/sparkyfitness.yaml)",
"summary": "1 for CVE-2026-111497 by @nalvazhvu in #3111"
},
@@ -1951,6 +1951,12 @@
"silent": "first read after the seed",
"summary": "Execute Command Node in n8n Allows Authenticated Users to Run Arbitrary Commands on Host"
},
"privatebin/pdo|GHSA-6vvp-q86m-cp8q": {
"first": "2026-11-05",
"last_mailed": "2026-11-05",
"program": "privatebin/pdo 2.1.0 (privatebin)",
"summary": "SVG attachment preview runs same-origin script in the PrivateBin client"
},
"privatebin/pdo|GHSA-c4gc-8mcm-hh65": {
"first": "2026-10-30",
"last_mailed": "2026-10-30",
@@ -1963,6 +1969,12 @@
"program": "privatebin/pdo 2.1.0 (privatebin)",
"summary": "Unauthenticated encrypted comment replay allows persistent discussion reparenting"
},
"privatebin/pdo|GHSA-w873-3ghv-hmh6": {
"first": "2026-11-05",
"last_mailed": "2026-11-05",
"program": "privatebin/pdo 2.1.0 (privatebin)",
"summary": "GHSA-w873-3ghv-hmh6 fix in 2"
},
"rommapp/romm|CVE-2026-111497": {
"first": "2026-10-28",
"last_mailed": "2026-11-04",
@@ -2115,19 +2127,6 @@
"python": null,
"unchecked": []
},
"sha256:13290e2f04bfd98cf8fc7e8d216fb76b2b2d12373d4923b859cd41c2d984fde8": {
"apk": {
"brotli-libs": "1.2.0-r1"
},
"brotli": null,
"brotlicffi": null,
"digest": "sha256:40e9b3aa6bc2fb28cfdeeeefe4f1b838d42fd78d750d3c90d1715f3461fd0faf",
"dpkg": {},
"env": {},
"node": null,
"python": null,
"unchecked": []
},
"sha256:19764751d501495b021530c9426f25d8f9f8748dc38ab3ba48eb62d7df2cd92e": {
"apk": {},
"brotli": null,
@@ -2867,6 +2866,19 @@
"python": null,
"unchecked": []
},
"sha256:726853be6043d213e341ba85a870dea15001fc7e1392d048c40bf7e9cc6e96a5": {
"apk": {
"brotli-libs": "1.2.1-r0"
},
"brotli": null,
"brotlicffi": null,
"digest": "sha256:6c6d8f13d9d7573e931bb3ef0831709e16578ea647747e530fa7ea0494aa7ca2",
"dpkg": {},
"env": {},
"node": null,
"python": null,
"unchecked": []
},
"sha256:7837f8148cc6db5e3e9a8df199912950adaee66898ebad4949d9dbb2f30aa02b": {
"apk": {},
"brotli": null,
@@ -3600,21 +3612,6 @@
"python": null,
"unchecked": []
},
"sha256:c65ecfe613b539ac74c62a4c3b2c27e8f8a6076384c8f27e8a3c0f3be17cc385": {
"apk": {},
"brotli": null,
"brotlicffi": null,
"digest": "sha256:5bbe76a31abbe0f1449d7820e550131c020b097c24d3bcfc5ad1231779982c1c",
"dpkg": {
"libbrotli1": "1.1.0-2+deb13u1",
"python3": "3.13.5-1",
"python3.13": "3.13.5-2+deb13u5"
},
"env": {},
"node": null,
"python": null,
"unchecked": []
},
"sha256:c6c7ae1d5dfdcb094ad344ed68ccffc26635c9c6be80965664c33baf064b0515": {
"apk": {},
"brotli": null,
@@ -3778,6 +3775,21 @@
"python": null,
"unchecked": []
},
"sha256:d9fa6e7ba43678ee1e5d1617007db9a134612032a74e2d86b44a9f582f1564cc": {
"apk": {},
"brotli": null,
"brotlicffi": null,
"digest": "sha256:5bbe76a31abbe0f1449d7820e550131c020b097c24d3bcfc5ad1231779982c1c",
"dpkg": {
"libbrotli1": "1.1.0-2+deb13u1",
"python3": "3.13.5-1",
"python3.13": "3.13.5-2+deb13u5"
},
"env": {},
"node": null,
"python": null,
"unchecked": []
},
"sha256:dbbc38ea21103cefb50396340cd88afec779c7e070b0a7bf5a75b4ce46651d3f": {
"apk": {
"brotli-libs": "1.2.0-r1"