Search for packages
Package details: pkg:deb/debian/mediawiki@1:1.39.1-2~bpo11%2B1
purl pkg:deb/debian/mediawiki@1:1.39.1-2~bpo11%2B1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (8)
Vulnerability Summary Aliases
VCID-5p4h-zz1t-rufv Vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation Parsoid.This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1; Parsoid: before 0.16.5, 0.19.2, 0.20.2. CVE-2025-32699
VCID-8r94-4gcj-kqf7 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/htmlform/fields/HTMLMultiSelectField.Php. This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1. CVE-2025-3469
VCID-bh3d-zm2d-kyb5 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/Api/QueryAbuseLog.Php, includes/Pager/AbuseLogPager.Php, includes/Special/SpecialAbuseLog.Php, includes/View/AbuseFilterViewExamine.Php. This issue affects AbuseFilter: from >= 1.43.0 before 1.43.1. CVE-2025-32700
VCID-fbhc-3z4g-sbhq Improper Preservation of Permissions vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/editpage/IntroMessageBuilder.Php, includes/Permissions/PermissionManager.Php, includes/Permissions/RestrictionStore.Php. This issue affects MediaWiki: before 1.42.6, 1.43.1. CVE-2025-32697
VCID-n4rb-218x-3fbx Improper Preservation of Permissions vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/actions/RevertAction.Php, includes/api/ApiFileRevert.Php. This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1. CVE-2025-32696
VCID-te4z-gmum-57er Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/logging/LogPager.Php. This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1. CVE-2025-32698
VCID-vge4-wfm4-r3dr Improper Encoding or Escaping of Output vulnerability in The Wikimedia Foundation Mediawiki Core - Feed Utils allows WebView Injection.This issue affects Mediawiki Core - Feed Utils: from 1.39 through 1.43. CVE-2025-32072
VCID-w83q-c41p-aaan An issue was discovered in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. In includes/logging/RightsLogFormatter.php, group-*-member messages can result in XSS on Special:log/rights. CVE-2023-51704

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-21T08:28:59.291741+00:00 Debian Importer Fixing VCID-8r94-4gcj-kqf7 https://security-tracker.debian.org/tracker/data/json 36.1.3
2025-06-21T08:21:42.589996+00:00 Debian Importer Fixing VCID-w83q-c41p-aaan https://security-tracker.debian.org/tracker/data/json 36.1.3
2025-06-21T02:27:01.793956+00:00 Debian Importer Fixing VCID-vge4-wfm4-r3dr https://security-tracker.debian.org/tracker/data/json 36.1.3
2025-06-21T01:46:40.263755+00:00 Debian Importer Fixing VCID-n4rb-218x-3fbx https://security-tracker.debian.org/tracker/data/json 36.1.3
2025-06-21T00:23:37.412258+00:00 Debian Importer Fixing VCID-te4z-gmum-57er https://security-tracker.debian.org/tracker/data/json 36.1.3
2025-06-21T00:14:36.125816+00:00 Debian Importer Fixing VCID-bh3d-zm2d-kyb5 https://security-tracker.debian.org/tracker/data/json 36.1.3
2025-06-20T22:22:03.023652+00:00 Debian Importer Fixing VCID-5p4h-zz1t-rufv https://security-tracker.debian.org/tracker/data/json 36.1.3
2025-06-20T20:08:26.822181+00:00 Debian Importer Fixing VCID-fbhc-3z4g-sbhq https://security-tracker.debian.org/tracker/data/json 36.1.3
2025-06-05T14:08:36.025669+00:00 Debian Importer Fixing VCID-fbhc-3z4g-sbhq https://security-tracker.debian.org/tracker/data/json 36.1.0
2025-04-23T12:05:19.453334+00:00 Debian Importer Fixing VCID-vge4-wfm4-r3dr https://security-tracker.debian.org/tracker/data/json 36.0.0
2025-04-22T05:50:20.486315+00:00 Debian Importer Fixing VCID-n4rb-218x-3fbx https://security-tracker.debian.org/tracker/data/json 36.0.0
2025-04-22T04:20:14.673936+00:00 Debian Importer Fixing VCID-te4z-gmum-57er https://security-tracker.debian.org/tracker/data/json 36.0.0
2025-04-22T04:09:56.456150+00:00 Debian Importer Fixing VCID-bh3d-zm2d-kyb5 https://security-tracker.debian.org/tracker/data/json 36.0.0
2025-04-22T01:52:10.286533+00:00 Debian Importer Fixing VCID-5p4h-zz1t-rufv https://security-tracker.debian.org/tracker/data/json 36.0.0
2025-04-13T02:04:36.820602+00:00 Debian Oval Importer Fixing VCID-w83q-c41p-aaan https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-11T09:15:39.617165+00:00 Debian Importer Fixing VCID-fbhc-3z4g-sbhq https://security-tracker.debian.org/tracker/data/json 36.0.0
2025-04-11T07:13:48.367692+00:00 Debian Importer Fixing VCID-8r94-4gcj-kqf7 https://security-tracker.debian.org/tracker/data/json 36.0.0
2025-04-05T05:38:31.695407+00:00 Debian Importer Fixing VCID-w83q-c41p-aaan https://security-tracker.debian.org/tracker/data/json 36.0.0
2025-02-21T15:03:46.829915+00:00 Debian Importer Fixing VCID-w83q-c41p-aaan https://security-tracker.debian.org/tracker/data/json 35.1.0
2024-11-24T03:59:54.727318+00:00 Debian Importer Fixing VCID-w83q-c41p-aaan https://security-tracker.debian.org/tracker/data/json 35.0.0
2024-10-11T01:20:47.302427+00:00 Debian Importer Fixing VCID-w83q-c41p-aaan https://security-tracker.debian.org/tracker/data/json 34.0.2
2024-09-20T05:48:25.269406+00:00 Debian Importer Fixing VCID-w83q-c41p-aaan https://security-tracker.debian.org/tracker/data/json 34.0.1