Skip to content

Commit 715a73b

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-m4f3-qp2w-gwh6 GHSA-4782-773j-qvcq GHSA-4g4j-v56v-2w79 GHSA-6v46-p4rh-797h GHSA-7fj8-2w2v-gvp9 GHSA-96j8-mwhp-xmj4 GHSA-c7x9-pfw8-h942 GHSA-cg8j-5cr2-568q GHSA-chwj-wc69-jqxj GHSA-f678-w5rv-9j99 GHSA-ggxq-2mg9-8966 GHSA-rx5p-47h9-9hv2 GHSA-vjq9-53r9-j2x9 GHSA-w8g9-9cxr-c95j GHSA-x835-c867-m9pw
1 parent 4a25af6 commit 715a73b

15 files changed

Lines changed: 497 additions & 1 deletion

File tree

‎advisories/github-reviewed/2026/02/GHSA-m4f3-qp2w-gwh6/GHSA-m4f3-qp2w-gwh6.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-m4f3-qp2w-gwh6",
4-
"modified": "2026-02-19T20:27:55Z",
4+
"modified": "2026-02-21T06:30:15Z",
55
"published": "2026-02-18T18:30:40Z",
66
"aliases": [
77
"CVE-2026-24708"
@@ -90,6 +90,10 @@
9090
"type": "PACKAGE",
9191
"url": "https://github.com/openstack/nova"
9292
},
93+
{
94+
"type": "WEB",
95+
"url": "https://lists.debian.org/debian-lts-announce/2026/02/msg00025.html"
96+
},
9397
{
9498
"type": "WEB",
9599
"url": "https://www.openwall.com/lists/oss-security/2026/02/17/7"

‎advisories/unreviewed/2026/02/GHSA-4782-773j-qvcq/GHSA-4782-773j-qvcq.json‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-4782-773j-qvcq",
4+
"modified": "2026-02-21T06:30:15Z",
5+
"published": "2026-02-21T06:30:15Z",
6+
"aliases": [
7+
"CVE-2026-27530"
8+
],
9+
"details": "Rejected reason: Not used",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27530"
16+
}
17+
],
18+
"database_specific": {
19+
"cwe_ids": [],
20+
"severity": null,
21+
"github_reviewed": false,
22+
"github_reviewed_at": null,
23+
"nvd_published_at": "2026-02-21T05:17:29Z"
24+
}
25+
}

‎advisories/unreviewed/2026/02/GHSA-4g4j-v56v-2w79/GHSA-4g4j-v56v-2w79.json‎

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-4g4j-v56v-2w79",
4+
"modified": "2026-02-21T06:30:16Z",
5+
"published": "2026-02-21T06:30:16Z",
6+
"aliases": [
7+
"CVE-2026-26046"
8+
],
9+
"details": "A vulnerability was found in a Moodle TeX filter administrative setting where insufficient sanitization of configuration input could allow command injection. On sites where the TeX filter is enabled and ImageMagick is installed, a maliciously crafted setting value entered by an administrator could result in unintended system command execution. While exploitation requires administrative privileges, successful compromise could affect the entire Moodle server.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26046"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://access.redhat.com/security/cve/CVE-2026-26046"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2440903"
29+
}
30+
],
31+
"database_specific": {
32+
"cwe_ids": [
33+
"CWE-78"
34+
],
35+
"severity": "HIGH",
36+
"github_reviewed": false,
37+
"github_reviewed_at": null,
38+
"nvd_published_at": "2026-02-21T06:17:00Z"
39+
}
40+
}

‎advisories/unreviewed/2026/02/GHSA-6v46-p4rh-797h/GHSA-6v46-p4rh-797h.json‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-6v46-p4rh-797h",
4+
"modified": "2026-02-21T06:30:15Z",
5+
"published": "2026-02-21T06:30:15Z",
6+
"aliases": [
7+
"CVE-2026-27527"
8+
],
9+
"details": "Rejected reason: Not used",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27527"
16+
}
17+
],
18+
"database_specific": {
19+
"cwe_ids": [],
20+
"severity": null,
21+
"github_reviewed": false,
22+
"github_reviewed_at": null,
23+
"nvd_published_at": "2026-02-21T05:17:29Z"
24+
}
25+
}

‎advisories/unreviewed/2026/02/GHSA-7fj8-2w2v-gvp9/GHSA-7fj8-2w2v-gvp9.json‎

Lines changed: 60 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,60 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-7fj8-2w2v-gvp9",
4+
"modified": "2026-02-21T06:30:17Z",
5+
"published": "2026-02-21T06:30:17Z",
6+
"aliases": [
7+
"CVE-2026-2861"
8+
],
9+
"details": "A vulnerability was detected in Foswiki up to 2.1.10. The affected element is an unknown function of the component Changes/Viewfile/Oops. The manipulation results in information disclosure. It is possible to launch the attack remotely. The exploit is now public and may be used. Upgrading to version 2.1.11 is sufficient to fix this issue. The patch is identified as 31aeecb58b64/d8ed86b10e46. Upgrading the affected component is recommended.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2861"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/foswiki/distro/commit/31aeecb58b64"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://foswiki.org/Tasks/Item15600"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://foswiki.org/Tasks/Item15601"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/?ctiid.347101"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/?id.347101"
45+
},
46+
{
47+
"type": "WEB",
48+
"url": "https://vuldb.com/?submit.753966"
49+
}
50+
],
51+
"database_specific": {
52+
"cwe_ids": [
53+
"CWE-200"
54+
],
55+
"severity": "MODERATE",
56+
"github_reviewed": false,
57+
"github_reviewed_at": null,
58+
"nvd_published_at": "2026-02-21T06:17:01Z"
59+
}
60+
}

‎advisories/unreviewed/2026/02/GHSA-96j8-mwhp-xmj4/GHSA-96j8-mwhp-xmj4.json‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-96j8-mwhp-xmj4",
4+
"modified": "2026-02-21T06:30:16Z",
5+
"published": "2026-02-21T06:30:16Z",
6+
"aliases": [
7+
"CVE-2026-2860"
8+
],
9+
"details": "A security vulnerability has been detected in feng_ha_ha/megagao ssm-erp and production_ssm up to 4288d53bd35757b27f2d070057aefb2c07bdd097. Impacted is an unknown function of the file EmployeeController.java. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. This product is distributed under two entirely different names. The project was informed of the problem early through an issue report but has not responded yet.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2860"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/megagao/production_ssm/issues/36"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://github.com/megagao/production_ssm/issues/36#issue-3914626431"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?ctiid.347100"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/?id.347100"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/?submit.754494"
45+
}
46+
],
47+
"database_specific": {
48+
"cwe_ids": [
49+
"CWE-266"
50+
],
51+
"severity": "MODERATE",
52+
"github_reviewed": false,
53+
"github_reviewed_at": null,
54+
"nvd_published_at": "2026-02-21T05:17:30Z"
55+
}
56+
}

‎advisories/unreviewed/2026/02/GHSA-c7x9-pfw8-h942/GHSA-c7x9-pfw8-h942.json‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-c7x9-pfw8-h942",
4+
"modified": "2026-02-21T06:30:15Z",
5+
"published": "2026-02-21T06:30:15Z",
6+
"aliases": [
7+
"CVE-2026-27528"
8+
],
9+
"details": "Rejected reason: Not used",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27528"
16+
}
17+
],
18+
"database_specific": {
19+
"cwe_ids": [],
20+
"severity": null,
21+
"github_reviewed": false,
22+
"github_reviewed_at": null,
23+
"nvd_published_at": "2026-02-21T05:17:29Z"
24+
}
25+
}

‎advisories/unreviewed/2026/02/GHSA-cg8j-5cr2-568q/GHSA-cg8j-5cr2-568q.json‎

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-cg8j-5cr2-568q",
4+
"modified": "2026-02-21T06:30:16Z",
5+
"published": "2026-02-21T06:30:16Z",
6+
"aliases": [
7+
"CVE-2026-26047"
8+
],
9+
"details": "A denial-of-service vulnerability was identified in Moodle’s TeX formula editor. When rendering TeX content using mimetex, insufficient execution time limits could allow specially crafted formulas to consume excessive server resources. An authenticated user could abuse this behavior to degrade performance or cause service interruption.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26047"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://access.redhat.com/security/cve/CVE-2026-26047"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2440905"
29+
}
30+
],
31+
"database_specific": {
32+
"cwe_ids": [
33+
"CWE-400"
34+
],
35+
"severity": "MODERATE",
36+
"github_reviewed": false,
37+
"github_reviewed_at": null,
38+
"nvd_published_at": "2026-02-21T06:17:00Z"
39+
}
40+
}

‎advisories/unreviewed/2026/02/GHSA-chwj-wc69-jqxj/GHSA-chwj-wc69-jqxj.json‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-chwj-wc69-jqxj",
4+
"modified": "2026-02-21T06:30:16Z",
5+
"published": "2026-02-21T06:30:16Z",
6+
"aliases": [
7+
"CVE-2026-27531"
8+
],
9+
"details": "Rejected reason: Not used",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27531"
16+
}
17+
],
18+
"database_specific": {
19+
"cwe_ids": [],
20+
"severity": null,
21+
"github_reviewed": false,
22+
"github_reviewed_at": null,
23+
"nvd_published_at": "2026-02-21T05:17:29Z"
24+
}
25+
}

‎advisories/unreviewed/2026/02/GHSA-f678-w5rv-9j99/GHSA-f678-w5rv-9j99.json‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-f678-w5rv-9j99",
4+
"modified": "2026-02-21T06:30:15Z",
5+
"published": "2026-02-21T06:30:15Z",
6+
"aliases": [
7+
"CVE-2026-27529"
8+
],
9+
"details": "Rejected reason: Not used",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27529"
16+
}
17+
],
18+
"database_specific": {
19+
"cwe_ids": [],
20+
"severity": null,
21+
"github_reviewed": false,
22+
"github_reviewed_at": null,
23+
"nvd_published_at": "2026-02-21T05:17:29Z"
24+
}
25+
}

0 commit comments

Comments
 (0)