Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u4?distro=trixie
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u4?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (12)
Vulnerability Summary Aliases
VCID-2wcb-hty6-uyez Improper Encoding or Escaping of Output vulnerability in The Wikimedia Foundation Mediawiki Core - Feed Utils allows WebView Injection.This issue affects Mediawiki Core - Feed Utils: from 1.39 through 1.43. CVE-2025-32072
VCID-74ej-8sna-jyek Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/logging/LogPager.Php. This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1. CVE-2025-32698
VCID-95d1-mkm6-r3cq Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/api/ApiFeedContributions.Php. This issue affects MediaWiki: from * before 1.39.13, 1.42.7 1.43.2, 1.44.0. CVE-2025-6591
VCID-a8nh-mvhd-bka7 MediaWiki: MediaWiki: Vulnerability in authentication management CVE-2025-6597
VCID-b5ke-cjtq-q3ev Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MultimediaViewer.This issue affects MultimediaViewer: from * before 1.39.13, 1.42.7, 1.43.2, 1.44.0. CVE-2025-6595
VCID-h3d2-nr9e-nqbk Improper Authentication vulnerability in Wikimedia Foundation Mediawiki - CentralAuth Extension allows : Bypass Authentication.This issue affects Mediawiki - CentralAuth Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2. CVE-2025-6926
VCID-h789-pcxv-kbgd Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/htmlform/fields/HTMLUserTextField.Php. This issue affects MediaWiki: from * through 1.39.12, 1.42.76 1.43.1, 1.44.0. CVE-2025-6590
VCID-k7qb-7hbj-1qc2 MediaWiki: MediaWiki: Cross-site Scripting vulnerability via improper input neutralization CVE-2025-6594
VCID-pwjk-pzpj-aff6 Vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation Parsoid.This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1; Parsoid: before 0.16.5, 0.19.2, 0.20.2. CVE-2025-32699
VCID-w51y-hprj-buap Improper Preservation of Permissions vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/actions/RevertAction.Php, includes/api/ApiFileRevert.Php. This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1. CVE-2025-32696
VCID-xtd9-wbd9-67ew Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/user/User.Php. This issue affects MediaWiki: from 1.27.0 before 1.39.13, 1.42.7 1.43.2, 1.44.0. CVE-2025-6593
VCID-z3qw-4ejj-uffj Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/htmlform/fields/HTMLMultiSelectField.Php. This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1. CVE-2025-3469

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T11:04:53.374245+00:00 Debian Importer Fixing VCID-h789-pcxv-kbgd https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:49:15.075666+00:00 Debian Importer Fixing VCID-w51y-hprj-buap https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:33:36.479814+00:00 Debian Importer Fixing VCID-z3qw-4ejj-uffj https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:38:17.722515+00:00 Debian Importer Fixing VCID-74ej-8sna-jyek https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:37:20.304549+00:00 Debian Importer Fixing VCID-h3d2-nr9e-nqbk https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:13:07.096633+00:00 Debian Importer Fixing VCID-k7qb-7hbj-1qc2 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:04:44.670116+00:00 Debian Importer Fixing VCID-b5ke-cjtq-q3ev https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:59:21.964355+00:00 Debian Importer Fixing VCID-2wcb-hty6-uyez https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:58:26.985042+00:00 Debian Importer Fixing VCID-xtd9-wbd9-67ew https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:50:21.247431+00:00 Debian Importer Fixing VCID-a8nh-mvhd-bka7 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:42:26.269659+00:00 Debian Importer Fixing VCID-95d1-mkm6-r3cq https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:40:57.511753+00:00 Debian Importer Fixing VCID-pwjk-pzpj-aff6 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-12T18:14:33.984806+00:00 Debian Importer Fixing VCID-h3d2-nr9e-nqbk https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-12T18:14:32.973919+00:00 Debian Importer Fixing VCID-h789-pcxv-kbgd https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-12T18:14:31.866479+00:00 Debian Importer Fixing VCID-z3qw-4ejj-uffj https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-12T18:14:31.604615+00:00 Debian Importer Fixing VCID-w51y-hprj-buap https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:24:52.843895+00:00 Debian Importer Fixing VCID-74ej-8sna-jyek https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:16:36.897966+00:00 Debian Importer Fixing VCID-2wcb-hty6-uyez https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:10:02.604331+00:00 Debian Importer Fixing VCID-k7qb-7hbj-1qc2 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:05:04.154927+00:00 Debian Importer Fixing VCID-b5ke-cjtq-q3ev https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:01:09.739760+00:00 Debian Importer Fixing VCID-xtd9-wbd9-67ew https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T17:56:18.333967+00:00 Debian Importer Fixing VCID-a8nh-mvhd-bka7 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T17:51:05.554003+00:00 Debian Importer Fixing VCID-95d1-mkm6-r3cq https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T17:50:10.474395+00:00 Debian Importer Fixing VCID-pwjk-pzpj-aff6 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:45:54.734716+00:00 Debian Importer Fixing VCID-h3d2-nr9e-nqbk https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:45:54.123391+00:00 Debian Importer Fixing VCID-a8nh-mvhd-bka7 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:45:54.000708+00:00 Debian Importer Fixing VCID-b5ke-cjtq-q3ev https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:45:53.937766+00:00 Debian Importer Fixing VCID-k7qb-7hbj-1qc2 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:45:53.874616+00:00 Debian Importer Fixing VCID-xtd9-wbd9-67ew https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:45:53.755426+00:00 Debian Importer Fixing VCID-95d1-mkm6-r3cq https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:45:53.692261+00:00 Debian Importer Fixing VCID-h789-pcxv-kbgd https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:45:52.533170+00:00 Debian Importer Fixing VCID-z3qw-4ejj-uffj https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:45:52.416478+00:00 Debian Importer Fixing VCID-pwjk-pzpj-aff6 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:45:52.354347+00:00 Debian Importer Fixing VCID-74ej-8sna-jyek https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:45:52.230828+00:00 Debian Importer Fixing VCID-w51y-hprj-buap https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:45:52.166646+00:00 Debian Importer Fixing VCID-2wcb-hty6-uyez https://security-tracker.debian.org/tracker/data/json 38.1.0