admin/felhom.eu
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

security-watch: memory of 2026-11-01 (R-1303). Docs only.

Browse Source
This commit is contained in:
felhom security watch committed 2026-11-01 03:41:13 +00:00
1 parent 38baf4b543
commit f196e74e60
1 file changed
+38 -2
Download Patch File Download Diff File Expand all files Collapse all files
documentation/security-watch/state.json
+38 -2
View File
@@ -1241,6 +1241,12 @@
"program": "louislam/uptime-kuma 2.5.6 (uptimekuma-system/uptimekuma.yaml)",
"summary": "Node.js 22.22.3 inside the image: Brotli decoder out-of-bounds write (HTTP2Shell): a crafted compressed body can run code in the process"
},
"dooplex:louislam/uptime-kuma|GHSA-86ch-2247-gr56": {
"first": "2026-11-01",
"last_mailed": "2026-11-01",
"program": "louislam/uptime-kuma 2.5.6 (uptimekuma-system/uptimekuma.yaml)",
"summary": "Unauthenticated Host-header injection and RSS cache poisoning"
},
"dooplex:louislam/uptime-kuma|GHSA-qjxc-h5jf-c7rj": {
"first": "2026-10-28",
"last_mailed": "2026-10-28",
@@ -1259,6 +1265,12 @@
"program": "louislam/uptime-kuma 2.5.5 (uptime-kuma)",
"summary": "⬆️ Security Fixes"
},
"dooplex:louislam/uptime-kuma|release:louislam/uptime-kuma@2.5.9": {
"first": "2026-11-01",
"last_mailed": "2026-11-01",
"program": "louislam/uptime-kuma 2.5.6 (uptimekuma-system/uptimekuma.yaml)",
"summary": "⬆️ Security Fixes"
},
"dooplex:outlinewiki/outline|CVE-2026-111497": {
"first": "2026-10-28",
"last_mailed": "2026-10-28",
@@ -1529,6 +1541,12 @@
"program": "ghcr.io/lukegus/termix 26.10.5 (termix)",
"summary": "0 for a security fix"
},
"ghcr.io/mealie-recipes/mealie|release:mealie-recipes/mealie@v3.30.0": {
"first": "2026-11-01",
"last_mailed": "2026-11-01",
"program": "ghcr.io/mealie-recipes/mealie v3.29.0 (mealie)",
"summary": "fix(deps): update dependency pillow to v13 [security] @ renovate[bot] ( #8822 )"
},
"ghcr.io/paperless-ngx/paperless-ngx|CVE-2026-111497": {
"first": "2026-10-28",
"last_mailed": "2026-10-28",
@@ -1683,6 +1701,12 @@
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
"summary": "Authenticated Modify-only user can create new files through WebDAV PUT despite Create permission being disabled"
},
"gtstef/filebrowser|GHSA-892f-9h5p-mfc8": {
"first": "2026-11-01",
"last_mailed": "2026-11-01",
"program": "gtstef/filebrowser 1.5.8-stable (controller infra)",
"summary": "Sensitive Data Exposure via /api/settings"
},
"gtstef/filebrowser|GHSA-8m35-wcjh-95q7": {
"first": "2026-10-26",
"last_mailed": "2026-10-26",
@@ -1827,6 +1851,12 @@
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
"summary": "Share authorization gaps let read-only users delete files"
},
"louislam/uptime-kuma|GHSA-86ch-2247-gr56": {
"first": "2026-11-01",
"last_mailed": "2026-11-01",
"program": "louislam/uptime-kuma 2.5.7 (uptime-kuma)",
"summary": "Unauthenticated Host-header injection and RSS cache poisoning"
},
"louislam/uptime-kuma|GHSA-qjxc-h5jf-c7rj": {
"first": "2026-10-28",
"last_mailed": "2026-10-28",
@@ -1839,6 +1869,12 @@
"program": "louislam/uptime-kuma 2.5.5 (uptime-kuma)",
"summary": "⬆️ Security Fixes"
},
"louislam/uptime-kuma|release:louislam/uptime-kuma@2.5.9": {
"first": "2026-11-01",
"last_mailed": "2026-11-01",
"program": "louislam/uptime-kuma 2.5.7 (uptime-kuma)",
"summary": "⬆️ Security Fixes"
},
"n8nio/n8n|GHSA-2x68-96jw-5r6c": {
"first": "2026-10-29",
"last_mailed": "2026-10-29",
@@ -1946,11 +1982,11 @@
"failures": {
"registry:docker.io": {
"mailed": true,
"streak": 5
"streak": 6
},
"runtime": {
"mailed": true,
"streak": 4
"streak": 5
}
},
"runtime_cache": {