{"cves":[{"id":"CVE-2026-5266","published":"2026-05-11T18:16:00","updated_at":"2026-07-10T21:02:08.763534+00:00","description":"\nExposure of Sensitive Information to an Unauthorized Actor vulnerability in\nWikimedia Foundation Echo.\n This vulnerability is associated with program files\nincludes/Api/ApiEchoNotifications.Php.\nThis issue affects Echo: from * before 1.43.7, 1.44.4, 1.45.2.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":{"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":2.3,"baseSeverity":"LOW"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-5266","http://phabricator.wikimedia.org/T420154","https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Echo/+/1265622 (REL1_43)","https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Echo/+/1265608 (master)","https://lists.wikimedia.org/hyperkitty/list/wikitech-l@lists.wikimedia.org/thread/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/"],"bugs":[""],"patches":{"mediawiki":[]},"tags":{},"packages":[{"name":"mediawiki","source":"https://ubuntu.com/security/cve?package=mediawiki","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mediawiki","debian":"https://tracker.debian.org/pkg/mediawiki","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1:1.43.8+dfsg-1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-44777","published":"2026-05-11T18:16:00","updated_at":"2026-06-26T07:14:56.655549+00:00","description":"\njq is a command-line JSON processor. In 1.8.2rc1 and earlier, the ordinary\nmodule loader recurses without cycle detection when two\notherwise valid modules include each other.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"PASSIVE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":5.4,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-44777","https://github.com/jqlang/jq/security/advisories/GHSA-rmpv-jgvr-wpr9","https://github.com/jqlang/jq/commit/f58787c41835d9b17795730cb04925fdba25c71c"],"bugs":[""],"patches":{"jq":["upstream: https://github.com/jqlang/jq/commit/f58787c41835d9b17795730cb04925fdba25c71c"]},"tags":{},"packages":[{"name":"jq","source":"https://ubuntu.com/security/cve?package=jq","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=jq","debian":"https://tracker.debian.org/pkg/jq","statuses":[{"release_codename":"bionic","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.8.2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-43896","published":"2026-05-11T18:16:00","updated_at":"2026-06-26T07:14:56.655549+00:00","description":"\njq is a command-line JSON processor. In 1.8.1 and earlier, unbounded\nrecursion in jv_object_merge_recursive() allows a crafted jq program to\ncrash the process with a segfault. The function is reachable through the *\noperator when both operands are objects.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.2,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.2,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-43896","https://github.com/jqlang/jq/security/advisories/GHSA-mg96-6h3q-g846","https://github.com/jqlang/jq/commit/532ccea6080ed6758f39fe9f6208a44b665023d2"],"bugs":[""],"patches":{"jq":["upstream: https://github.com/jqlang/jq/commit/532ccea6080ed6758f39fe9f6208a44b665023d2"]},"tags":{},"packages":[{"name":"jq","source":"https://ubuntu.com/security/cve?package=jq","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=jq","debian":"https://tracker.debian.org/pkg/jq","statuses":[{"release_codename":"bionic","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.8.2","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-43895","published":"2026-05-11T18:16:00","updated_at":"2026-06-26T07:14:56.655549+00:00","description":"\njq is a command-line JSON processor. In 1.8.1 and earlier, jq accepts\nembedded NUL bytes in import paths at the jq-language level, but later\nresolves those paths through C string operations during module and\ndata-file lookup. This creates a mismatch between the logical import string\nthat policy or audit code may validate and the on-disk path that jq\nactually opens.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":4.4,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":4.4,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-43895","https://github.com/jqlang/jq/security/advisories/GHSA-7q7g-mrq3-phxr","https://github.com/jqlang/jq/commit/9d223f153c3632a207fa071caaa6292da33ae361"],"bugs":[""],"patches":{"jq":["upstream: https://github.com/jqlang/jq/commit/9d223f153c3632a207fa071caaa6292da33ae361"]},"tags":{},"packages":[{"name":"jq","source":"https://ubuntu.com/security/cve?package=jq","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=jq","debian":"https://tracker.debian.org/pkg/jq","statuses":[{"release_codename":"bionic","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.8.2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-43894","published":"2026-05-11T18:16:00","updated_at":"2026-05-13T17:05:01.777611+00:00","description":"\njq is a command-line JSON processor. In 1.8.1 and earlier, when\ndecNumberFromString is given a number literal of INT_MAX-1 (2147483646)\ndigits, the D2U() macro overflows during signed-int arithmetic. The wrapped\nnegative value bypasses the heap-allocation size check, causes the function\nto use a 30-byte stack buffer, and then writes ≈715 million 16-bit units\n(≈1.4 GiB) at an offset 1.43 GiB below the stack frame. The written content\nis fully attacker-controlled (the parsed decimal digits, packed\n3-per-unit).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.2,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.2,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-43894","https://github.com/jqlang/jq/security/advisories/GHSA-5v7p-2r57-2g4g"],"bugs":[""],"patches":{"jq":[]},"tags":{},"packages":[{"name":"jq","source":"https://ubuntu.com/security/cve?package=jq","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=jq","debian":"https://tracker.debian.org/pkg/jq","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-42859","published":"2026-05-11T18:16:00","updated_at":"2026-07-10T20:12:56.638511+00:00","description":"\nNeat VNC is a VNC server library. Prior to 0.9.6, a pre-authentication\nstack buffer overflow exists in neatvnc in the RSA-AES security type\nhandler. An unauthenticated remote attacker who can reach the VNC listening\nsocket can send a crafted security type 5 (RSA-AES) or security type 129\n(RSA-AES-256) handshake with an oversized client RSA public key, causing\nrsa_aes_send_challenge in src/auth/rsa-aes.c to overflow a 1024-byte\non-stack buffer when encrypting the server challenge. This results in at\nleast a denial of service via server crash. This vulnerability is fixed in\n0.9.6.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":{"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":8.1,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-42859","https://github.com/any1/neatvnc/security/advisories/GHSA-567c-gpv8-qh9h","https://github.com/any1/neatvnc/commit/1f6cd6b75cc167fed3a19a9d1552a1f662f6b337 (v1.0.0)"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1136644"],"patches":{"neatvnc":[]},"tags":{},"packages":[{"name":"neatvnc","source":"https://ubuntu.com/security/cve?package=neatvnc","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=neatvnc","debian":"https://tracker.debian.org/pkg/neatvnc","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-41257","published":"2026-05-11T18:16:00","updated_at":"2026-06-26T07:14:56.655549+00:00","description":"\njq is a command-line JSON processor. In 1.8.1 and earlier, the jq bytecode\nVM's data stack tracks its allocation size in a signed int. When the stack\ngrows beyond ≈1 GiB (via deeply nested generator forks), the doubling\narithmetic overflows. The wrapped value is passed to realloc and then used\nfor a memmove with attacker-influenced offsets.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"HIGH","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"PASSIVE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":6.4,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-41257","https://github.com/jqlang/jq/security/advisories/GHSA-4jm8-m363-4539","https://github.com/jqlang/jq/commit/01b3cded76daacbfddb7f8763700b0803bcb5c6f"],"bugs":[""],"patches":{"jq":["upstream: https://github.com/jqlang/jq/commit/01b3cded76daacbfddb7f8763700b0803bcb5c6f"]},"tags":{},"packages":[{"name":"jq","source":"https://ubuntu.com/security/cve?package=jq","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=jq","debian":"https://tracker.debian.org/pkg/jq","statuses":[{"release_codename":"bionic","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.8.2rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-41256","published":"2026-05-11T18:16:00","updated_at":"2026-06-26T07:14:56.655549+00:00","description":"\njq is a command-line JSON processor. In 1.8.1 and earlier, Top-level jq\nprograms loaded from a file with -f are truncated at the first embedded NUL\nbyte on current upstream HEAD. A crafted filter file such as . followed by\n\\x00 and arbitrary suffix compiles and executes as only the prefix before\nthe NUL. This leaves jq with a post-CVE-2026-33948 prefix/full-buffer\nmismatch on the compilation path even though the JSON parser path has\nalready been fixed.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-41256","https://github.com/jqlang/jq/security/advisories/GHSA-vf2h-chrj-q3fg","https://github.com/jqlang/jq/commit/5a015deae35d19e3ebbc65db6c157a80e76df738"],"bugs":[""],"patches":{"jq":["upstream: https://github.com/jqlang/jq/commit/5a015deae35d19e3ebbc65db6c157a80e76df738"]},"tags":{},"packages":[{"name":"jq","source":"https://ubuntu.com/security/cve?package=jq","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=jq","debian":"https://tracker.debian.org/pkg/jq","statuses":[{"release_codename":"bionic","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.8.2rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-40612","published":"2026-05-11T18:16:00","updated_at":"2026-07-10T20:10:46.083243+00:00","description":"\njq is a command-line JSON processor. In 1.8.1 and earlier, jv_contains\nrecurses into nested arrays/objects with no depth limit. With a\nsufficiently nested input structure (built programmatically with reduce,\nsince the JSON parser caps at depth 10000), the C stack is exhausted.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"PASSIVE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":5.4,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-40612","https://github.com/jqlang/jq/security/advisories/GHSA-r7m6-x9c7-h69j"],"bugs":[""],"patches":{"jq":[]},"tags":{},"packages":[{"name":"jq","source":"https://ubuntu.com/security/cve?package=jq","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=jq","debian":"https://tracker.debian.org/pkg/jq","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-34095","published":"2026-05-11T18:16:00","updated_at":"2026-07-10T20:09:22.235408+00:00","description":"\nVulnerability in Wikimedia Foundation MediaWiki.\n This vulnerability is associated with program files\nincludes/Actions/ActionEntryPoint.Php, includes/Request/FauxResponse.Php.\nThis issue affects MediaWiki: from * before 1.43.7, 1.44.4, 1.45.2.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"HIGH","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":0.0,"baseSeverity":"NONE"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-34095","http://phabricator.wikimedia.org/T419192","https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1265669 (REL1_43)","https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1265642 (master)","https://lists.wikimedia.org/hyperkitty/list/wikitech-l@lists.wikimedia.org/thread/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/"],"bugs":[""],"patches":{"mediawiki":[]},"tags":{},"packages":[{"name":"mediawiki","source":"https://ubuntu.com/security/cve?package=mediawiki","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mediawiki","debian":"https://tracker.debian.org/pkg/mediawiki","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1:1.43.8+dfsg-1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-34094","published":"2026-05-11T18:16:00","updated_at":"2026-07-10T20:08:50.171180+00:00","description":"\nVulnerability in Wikimedia Foundation MediaWiki.\n This vulnerability is associated with program files\nincludes/Page/Article.Php.\nThis issue affects MediaWiki: from * before 1.43.7, 1.44.4, 1.45.2.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":3.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":3.8,"baseSeverity":"LOW"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"HIGH","userInteraction":"PASSIVE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":2.0,"baseSeverity":"LOW"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-34094","https://phabricator.wikimedia.org/T416090","https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1265668 (REL1_43)","https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1265641 (master)","https://lists.wikimedia.org/hyperkitty/list/wikitech-l@lists.wikimedia.org/thread/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/"],"bugs":[""],"patches":{"mediawiki":[]},"tags":{},"packages":[{"name":"mediawiki","source":"https://ubuntu.com/security/cve?package=mediawiki","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mediawiki","debian":"https://tracker.debian.org/pkg/mediawiki","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1:1.43.8+dfsg-1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-34093","published":"2026-05-11T18:16:00","updated_at":"2026-07-10T20:09:22.235408+00:00","description":"\nExposure of Sensitive Information to an Unauthorized Actor vulnerability in\nWikimedia Foundation MediaWiki.\n This vulnerability is associated with program files\nincludes/Specials/SpecialUserRights.Php.\nThis issue affects MediaWiki: from * before 1.43.7, 1.44.4, 1.45.2.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/R:A","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"ACTIVE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":1.1,"baseSeverity":"LOW"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-34093","https://phabricator.wikimedia.org/T414547","https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1265667 (REL1_43)","https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1265639 (master)","https://lists.wikimedia.org/hyperkitty/list/wikitech-l@lists.wikimedia.org/thread/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/"],"bugs":[""],"patches":{"mediawiki":[]},"tags":{},"packages":[{"name":"mediawiki","source":"https://ubuntu.com/security/cve?package=mediawiki","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mediawiki","debian":"https://tracker.debian.org/pkg/mediawiki","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1:1.43.8+dfsg-1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-34092","published":"2026-05-11T16:17:00","updated_at":"2026-07-10T20:09:22.235408+00:00","description":"\nExposure of Sensitive Information to an Unauthorized Actor vulnerability in\nWikimedia Foundation MediaWiki.\n This vulnerability is associated with program files\nincludes/Skin/Skin.Php.\nThis issue affects MediaWiki: from * before 1.43.7, 1.44.4, 1.45.2.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"HIGH","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"PASSIVE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":2.1,"baseSeverity":"LOW"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-34092","https://phabricator.wikimedia.org/T384147","https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1265652 (REL1_43)","https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1265638 (master)","https://lists.wikimedia.org/hyperkitty/list/wikitech-l@lists.wikimedia.org/thread/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/"],"bugs":[""],"patches":{"mediawiki":[]},"tags":{},"packages":[{"name":"mediawiki","source":"https://ubuntu.com/security/cve?package=mediawiki","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mediawiki","debian":"https://tracker.debian.org/pkg/mediawiki","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1:1.43.8+dfsg-1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"1.27.4","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"1.31.7","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"1.35.6","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"1:1.39.7-1ubuntu0.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"resolute","status":"released","description":"1:1.43.8+dfsg-2","component":null,"pocket":"security"}]}],"notices_ids":["USN-8315-1"],"notices":[{"id":"USN-8315-1","title":"MediaWiki vulnerabilities","summary":"MediaWiki could be made to expose sensitive information over the\nnetwork.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-05-27T08:39:27.836265","description":"It was discovered that MediaWiki incorrectly handled group membership \nvisibility in the OATHAuth extension. An authenticated attacker could \nuse this issue to determine if other users had two-factor authentication \nenabled. (CVE-2026-34087)\n\nIt was discovered that MediaWiki incorrectly handled suppressed log entry \ntitles in the RecentChanges list. An unauthenticated attacker could use \nthis issue to view titles of deleted or suppressed pages that should be hidden.\n(CVE-2026-34088)\n\nIt was discovered that MediaWiki incorrectly handled resource loading timing\ninformation. An attacker could use this issue to determine if certain pages \nexisted on a wiki. (CVE-2026-34092)","is_hidden":false,"release_packages":{"focal":[{"name":"mediawiki","version":"1:1.31.7-1ubuntu0.1~esm1","description":"The collaborative editing software that runs Wikipedia.","is_source":true},{"name":"mediawiki","version":"1:1.31.7-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mediawiki","version_link":null,"pocket":"esm-apps"},{"name":"mediawiki-classes","version":"1:1.31.7-1ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mediawiki","version_link":null,"pocket":"esm-apps"}],"jammy":[{"name":"mediawiki","version":"1:1.35.6-1ubuntu0.1~esm1","description":"The collaborative editing software that runs Wikipedia.","is_source":true},{"name":"mediawiki","version":"1:1.35.6-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mediawiki","version_link":null,"pocket":"esm-apps"},{"name":"mediawiki-classes","version":"1:1.35.6-1ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mediawiki","version_link":null,"pocket":"esm-apps"}],"noble":[{"name":"mediawiki","version":"1:1.39.7-1ubuntu0.1~esm1","description":"The collaborative editing software that runs Wikipedia.","is_source":true},{"name":"mediawiki","version":"1:1.39.7-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mediawiki","version_link":null,"pocket":"esm-apps"},{"name":"mediawiki-classes","version":"1:1.39.7-1ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mediawiki","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2026-34092","CVE-2026-34088","CVE-2026-34087"]}]},{"id":"CVE-2026-34091","published":"2026-05-11T16:17:00","updated_at":"2026-07-10T21:25:40.040608+00:00","description":"\nExposure of Sensitive Information to an Unauthorized Actor vulnerability in\nWikimedia Foundation MediaWiki.\nThis issue affects MediaWiki: from * before 1.43.7, 1.44.4, 1.45.2.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/R:U","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-34091","https://phabricator.wikimedia.org/T411305","https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1265651 (REL1_43)","https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1265637 (master)","https://lists.wikimedia.org/hyperkitty/list/wikitech-l@lists.wikimedia.org/thread/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/"],"bugs":[""],"patches":{"mediawiki":[]},"tags":{},"packages":[{"name":"mediawiki","source":"https://ubuntu.com/security/cve?package=mediawiki","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mediawiki","debian":"https://tracker.debian.org/pkg/mediawiki","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1:1.43.8+dfsg-1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"1.27.4","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"1.31.7","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"1.35.6","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"1.39.7","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"1:1.43.8+dfsg-2","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-34090","published":"2026-05-11T16:17:00","updated_at":"2026-06-06T11:40:53.729258+00:00","description":"\nExposure of Sensitive Information to an Unauthorized Actor vulnerability in\nWikimedia Foundation CheckUser.\nThis issue affects CheckUser: from 1.45.0 before 1.45.2.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/R:U","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"HIGH","userInteraction":"PASSIVE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":4.8,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-34090","https://phabricator.wikimedia.org/T411366","https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/1240641 (master)","https://lists.wikimedia.org/hyperkitty/list/wikitech-l@lists.wikimedia.org/thread/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/"],"bugs":[""],"patches":{"mediawiki":[]},"tags":{},"packages":[{"name":"mediawiki","source":"https://ubuntu.com/security/cve?package=mediawiki","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mediawiki","debian":"https://tracker.debian.org/pkg/mediawiki","statuses":[{"release_codename":"upstream","status":"not-affected","description":"debian: Vulnerable code not present, introduced past 1.43","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"1.27.4","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"1.31.7","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"1.35.6","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"1.39.7","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"1.43.3+dfsg","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"1.43.8+dfsg","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-34089","published":"2026-05-11T16:17:00","updated_at":"2026-08-12T13:31:34.378687+00:00","description":"\nVulnerability in Wikimedia Foundation Scribunto.\nThis issue affects Scribunto: from 1.45.0 before 1.45.2.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"HIGH","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":2.3,"baseSeverity":"LOW"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-34089","https://phabricator.wikimedia.org/T419168","https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Scribunto/+/1265609 (master)","https://lists.wikimedia.org/hyperkitty/list/wikitech-l@lists.wikimedia.org/thread/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/"],"bugs":[""],"patches":{"mediawiki":[]},"tags":{},"packages":[{"name":"mediawiki","source":"https://ubuntu.com/security/cve?package=mediawiki","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mediawiki","debian":"https://tracker.debian.org/pkg/mediawiki","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"debian: Vulnerable code not present, introduced past 1.43","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-34088","published":"2026-05-11T16:17:00","updated_at":"2026-07-10T20:05:42.323828+00:00","description":"\nExposure of Sensitive Information to an Unauthorized Actor vulnerability in\nWikimedia Foundation MediaWiki.\nThis issue affects MediaWiki: from * before 1.43.7, 1.44.4, 1.45.2.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/R:U/RE:M","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"PASSIVE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":1.3,"baseSeverity":"LOW"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-34088","https://phabricator.wikimedia.org/T410429","https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1265670 (REL1_43)","https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1265640 (master)","https://lists.wikimedia.org/hyperkitty/list/wikitech-l@lists.wikimedia.org/thread/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/"],"bugs":[""],"patches":{"mediawiki":[]},"tags":{},"packages":[{"name":"mediawiki","source":"https://ubuntu.com/security/cve?package=mediawiki","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mediawiki","debian":"https://tracker.debian.org/pkg/mediawiki","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1:1.43.8+dfsg-1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"1.27.4","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1:1.31.7-1ubuntu0.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"jammy","status":"released","description":"1:1.35.6-1ubuntu0.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"noble","status":"released","description":"1:1.39.7-1ubuntu0.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"resolute","status":"released","description":"1:1.43.8+dfsg-2","component":null,"pocket":"security"}]}],"notices_ids":["USN-8315-1"],"notices":[{"id":"USN-8315-1","title":"MediaWiki vulnerabilities","summary":"MediaWiki could be made to expose sensitive information over the\nnetwork.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-05-27T08:39:27.836265","description":"It was discovered that MediaWiki incorrectly handled group membership \nvisibility in the OATHAuth extension. An authenticated attacker could \nuse this issue to determine if other users had two-factor authentication \nenabled. (CVE-2026-34087)\n\nIt was discovered that MediaWiki incorrectly handled suppressed log entry \ntitles in the RecentChanges list. An unauthenticated attacker could use \nthis issue to view titles of deleted or suppressed pages that should be hidden.\n(CVE-2026-34088)\n\nIt was discovered that MediaWiki incorrectly handled resource loading timing\ninformation. An attacker could use this issue to determine if certain pages \nexisted on a wiki. (CVE-2026-34092)","is_hidden":false,"release_packages":{"focal":[{"name":"mediawiki","version":"1:1.31.7-1ubuntu0.1~esm1","description":"The collaborative editing software that runs Wikipedia.","is_source":true},{"name":"mediawiki","version":"1:1.31.7-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mediawiki","version_link":null,"pocket":"esm-apps"},{"name":"mediawiki-classes","version":"1:1.31.7-1ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mediawiki","version_link":null,"pocket":"esm-apps"}],"jammy":[{"name":"mediawiki","version":"1:1.35.6-1ubuntu0.1~esm1","description":"The collaborative editing software that runs Wikipedia.","is_source":true},{"name":"mediawiki","version":"1:1.35.6-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mediawiki","version_link":null,"pocket":"esm-apps"},{"name":"mediawiki-classes","version":"1:1.35.6-1ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mediawiki","version_link":null,"pocket":"esm-apps"}],"noble":[{"name":"mediawiki","version":"1:1.39.7-1ubuntu0.1~esm1","description":"The collaborative editing software that runs Wikipedia.","is_source":true},{"name":"mediawiki","version":"1:1.39.7-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mediawiki","version_link":null,"pocket":"esm-apps"},{"name":"mediawiki-classes","version":"1:1.39.7-1ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mediawiki","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2026-34092","CVE-2026-34088","CVE-2026-34087"]}]},{"id":"CVE-2026-34087","published":"2026-05-11T16:17:00","updated_at":"2026-07-10T20:07:07.563005+00:00","description":"\nExposure of Sensitive Information to an Unauthorized Actor vulnerability in\nWikimedia Foundation OATHAuth.\nThis issue affects OATHAuth: from * before 1.43.7, 1.44.4, 1.45.2.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/S:N/AU:Y/R:A/RE:M","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"PASSIVE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":5.1,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-34087","https://phabricator.wikimedia.org/T412061","https://gerrit.wikimedia.org/r/c/mediawiki/extensions/OATHAuth/+/1265614 (REL1_43)","https://gerrit.wikimedia.org/r/c/mediawiki/extensions/OATHAuth/+/1265610 (master)","https://lists.wikimedia.org/hyperkitty/list/wikitech-l@lists.wikimedia.org/thread/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/"],"bugs":[""],"patches":{"mediawiki":[]},"tags":{},"packages":[{"name":"mediawiki","source":"https://ubuntu.com/security/cve?package=mediawiki","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mediawiki","debian":"https://tracker.debian.org/pkg/mediawiki","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1:1.43.8+dfsg-1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"1.27.4","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"1.31.7","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1:1.35.6-1ubuntu0.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"noble","status":"released","description":"1:1.39.7-1ubuntu0.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"resolute","status":"released","description":"1:1.43.8+dfsg-2","component":null,"pocket":"security"}]}],"notices_ids":["USN-8315-1"],"notices":[{"id":"USN-8315-1","title":"MediaWiki vulnerabilities","summary":"MediaWiki could be made to expose sensitive information over the\nnetwork.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-05-27T08:39:27.836265","description":"It was discovered that MediaWiki incorrectly handled group membership \nvisibility in the OATHAuth extension. An authenticated attacker could \nuse this issue to determine if other users had two-factor authentication \nenabled. (CVE-2026-34087)\n\nIt was discovered that MediaWiki incorrectly handled suppressed log entry \ntitles in the RecentChanges list. An unauthenticated attacker could use \nthis issue to view titles of deleted or suppressed pages that should be hidden.\n(CVE-2026-34088)\n\nIt was discovered that MediaWiki incorrectly handled resource loading timing\ninformation. An attacker could use this issue to determine if certain pages \nexisted on a wiki. (CVE-2026-34092)","is_hidden":false,"release_packages":{"focal":[{"name":"mediawiki","version":"1:1.31.7-1ubuntu0.1~esm1","description":"The collaborative editing software that runs Wikipedia.","is_source":true},{"name":"mediawiki","version":"1:1.31.7-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mediawiki","version_link":null,"pocket":"esm-apps"},{"name":"mediawiki-classes","version":"1:1.31.7-1ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mediawiki","version_link":null,"pocket":"esm-apps"}],"jammy":[{"name":"mediawiki","version":"1:1.35.6-1ubuntu0.1~esm1","description":"The collaborative editing software that runs Wikipedia.","is_source":true},{"name":"mediawiki","version":"1:1.35.6-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mediawiki","version_link":null,"pocket":"esm-apps"},{"name":"mediawiki-classes","version":"1:1.35.6-1ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mediawiki","version_link":null,"pocket":"esm-apps"}],"noble":[{"name":"mediawiki","version":"1:1.39.7-1ubuntu0.1~esm1","description":"The collaborative editing software that runs Wikipedia.","is_source":true},{"name":"mediawiki","version":"1:1.39.7-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mediawiki","version_link":null,"pocket":"esm-apps"},{"name":"mediawiki-classes","version":"1:1.39.7-1ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mediawiki","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2026-34092","CVE-2026-34088","CVE-2026-34087"]}]},{"id":"CVE-2026-34086","published":"2026-05-11T16:17:00","updated_at":"2026-07-10T20:07:07.563005+00:00","description":"\nVulnerability in Wikimedia Foundation AbuseFilter.\nThis issue affects AbuseFilter: from * before 1.43.7, 1.44.4, 1.45.2.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":{"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/S:N/AU:Y","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"LOW","userInteraction":"PASSIVE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"}},"baseScore":2.1,"baseSeverity":"LOW"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-34086","http://phabricator.wikimedia.org/T415584","https://gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/1265634 (REL1_43)","https://gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/1265611 (master)","https://lists.wikimedia.org/hyperkitty/list/wikitech-l@lists.wikimedia.org/thread/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/"],"bugs":[""],"patches":{"mediawiki":[]},"tags":{},"packages":[{"name":"mediawiki","source":"https://ubuntu.com/security/cve?package=mediawiki","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mediawiki","debian":"https://tracker.debian.org/pkg/mediawiki","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1:1.43.8+dfsg-1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-4802","published":"2026-05-11T14:16:00","updated_at":"2026-06-26T07:33:43.743964+00:00","description":"\nA flaw was found in Cockpit. This vulnerability allows a remote attacker to\nachieve arbitrary command execution on the host by exploiting unsanitized\nuser-controlled parameters within crafted links in the system logs user\ninterface (UI). An attacker can inject shell metacharacters and command\nsubstitutions into these parameters, leading to the execution of arbitrary\nshell commands on the affected system. This could result in a complete\nsystem compromise.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.0,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.0,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-4802","https://www.openwall.com/lists/oss-security/2026/05/20/19","https://bugzilla.redhat.com/show_bug.cgi?id=2451155"],"bugs":[""],"patches":{"cockpit":[]},"tags":{},"packages":[{"name":"cockpit","source":"https://ubuntu.com/security/cve?package=cockpit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=cockpit","debian":"https://tracker.debian.org/pkg/cockpit","statuses":[{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"362-1","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]}],"offset":11800,"limit":20,"total_results":79316}