Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u5?distro=trixie
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u5?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (12)
Vulnerability Summary Aliases
VCID-4yhr-jjt9-afaq Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/api/ApiQueryAllPages.Php. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1. CVE-2025-61641
VCID-7wh4-say2-pqap Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation VisualEditor. This vulnerability is associated with program files src/ce/ve.Ce.ClipboardHandler.Js. This issue affects VisualEditor: from * before 1.39.14, 1.43.4, 1.44.1. CVE-2025-61656
VCID-8uw8-ja3w-r3da MediaWiki: MediaWiki: Cross-site Scripting (XSS) vulnerability CVE-2025-11261
VCID-den1-257q-euc9 Vulnerability in Wikimedia Foundation TextExtracts. This vulnerability is associated with program files includes/ApiQueryExtracts.Php. This issue affects TextExtracts: from * before 1.39.14, 1.43.4, 1.44.1. CVE-2025-61653
VCID-e8np-4nbw-t3b3 Vulnerability in Wikimedia Foundation OATHAuth. This vulnerability is associated with program files src/Special/OATHManage.Php. This issue affects OATHAuth: from * before 1.39.14, 1.43.4, 1.44.1. CVE-2025-11173
VCID-fptt-2t1j-8fec Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/logging/ManualLogEntry.Php, includes/recentchanges/RecentChangeFactory.Php, includes/recentchanges/RecentChangeStore.Php. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1. CVE-2025-61639
VCID-m1xy-yucr-dqfs Vulnerability in Wikimedia Foundation ConfirmEdit. This vulnerability is associated with program files includes/FancyCaptcha/ApiFancyCaptchaReload.Php. This issue affects ConfirmEdit: *. CVE-2025-61635
VCID-mbs4-gs37-1fh5 Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/RecentChanges/EnhancedChangesList.Php. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1. CVE-2025-61646
VCID-pm3s-z5ap-qqay MediaWiki: MediaWiki: Arbitrary code execution via Cross-site Scripting (XSS) CVE-2025-61640
VCID-sr9a-a6vt-1qgt Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation Parsoid. This vulnerability is associated with program files includes/parser/Sanitizer.Php, src/Core/Sanitizer.Php. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1; Parsoid: from * before 0.16.6, 0.20.4, 0.21.1. CVE-2025-61638
VCID-vjd5-jv5h-yfhw Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation VisualEditor. This vulnerability is associated with program files includes/ApiVisualEditorEdit.Php, modules/ve-mw/init/targets/ve.Init.Mw.DesktopArticleTarget.Js, modules/ve-mw/ui/dialogs/ve.Ui.MWSaveDialog.Js. This issue affects VisualEditor: from * before 1.39.14, 1.43.4, 1.44.1. CVE-2025-61655
VCID-ztxx-cc2c-87at Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/recentchanges/RecentChangeRCFeedNotifier.Php. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1. CVE-2025-61643

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T11:19:08.680149+00:00 Debian Importer Fixing VCID-ztxx-cc2c-87at https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T11:12:37.253322+00:00 Debian Importer Fixing VCID-e8np-4nbw-t3b3 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:52:04.183604+00:00 Debian Importer Fixing VCID-pm3s-z5ap-qqay https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:41:38.388066+00:00 Debian Importer Fixing VCID-m1xy-yucr-dqfs https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:24:17.537290+00:00 Debian Importer Fixing VCID-mbs4-gs37-1fh5 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:55:12.525967+00:00 Debian Importer Fixing VCID-8uw8-ja3w-r3da https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:40:47.012411+00:00 Debian Importer Fixing VCID-fptt-2t1j-8fec https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:16:10.649857+00:00 Debian Importer Fixing VCID-7wh4-say2-pqap https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:09:30.827083+00:00 Debian Importer Fixing VCID-sr9a-a6vt-1qgt https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:54:54.391154+00:00 Debian Importer Fixing VCID-4yhr-jjt9-afaq https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:51:06.109151+00:00 Debian Importer Fixing VCID-den1-257q-euc9 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:40:41.997906+00:00 Debian Importer Fixing VCID-vjd5-jv5h-yfhw https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-12T18:14:32.643817+00:00 Debian Importer Fixing VCID-den1-257q-euc9 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-12T18:14:32.531346+00:00 Debian Importer Fixing VCID-mbs4-gs37-1fh5 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-12T18:14:32.386856+00:00 Debian Importer Fixing VCID-ztxx-cc2c-87at https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-12T18:14:32.229308+00:00 Debian Importer Fixing VCID-pm3s-z5ap-qqay https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-12T18:14:31.963034+00:00 Debian Importer Fixing VCID-m1xy-yucr-dqfs https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-12T18:14:31.436203+00:00 Debian Importer Fixing VCID-8uw8-ja3w-r3da https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-12T18:14:31.317791+00:00 Debian Importer Fixing VCID-e8np-4nbw-t3b3 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:26:21.796283+00:00 Debian Importer Fixing VCID-fptt-2t1j-8fec https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:11:45.275224+00:00 Debian Importer Fixing VCID-7wh4-say2-pqap https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:07:54.129058+00:00 Debian Importer Fixing VCID-sr9a-a6vt-1qgt https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T17:58:56.687183+00:00 Debian Importer Fixing VCID-4yhr-jjt9-afaq https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T17:50:00.536392+00:00 Debian Importer Fixing VCID-vjd5-jv5h-yfhw https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:45:53.515243+00:00 Debian Importer Fixing VCID-7wh4-say2-pqap https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:45:53.459702+00:00 Debian Importer Fixing VCID-vjd5-jv5h-yfhw https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:45:53.347701+00:00 Debian Importer Fixing VCID-den1-257q-euc9 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:45:53.236766+00:00 Debian Importer Fixing VCID-mbs4-gs37-1fh5 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:45:53.083457+00:00 Debian Importer Fixing VCID-ztxx-cc2c-87at https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:45:52.972810+00:00 Debian Importer Fixing VCID-4yhr-jjt9-afaq https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:45:52.917568+00:00 Debian Importer Fixing VCID-pm3s-z5ap-qqay https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:45:52.862132+00:00 Debian Importer Fixing VCID-fptt-2t1j-8fec https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:45:52.807520+00:00 Debian Importer Fixing VCID-sr9a-a6vt-1qgt https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:45:52.641922+00:00 Debian Importer Fixing VCID-m1xy-yucr-dqfs https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:45:52.100836+00:00 Debian Importer Fixing VCID-8uw8-ja3w-r3da https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:45:51.989012+00:00 Debian Importer Fixing VCID-e8np-4nbw-t3b3 https://security-tracker.debian.org/tracker/data/json 38.1.0