VulnerableCode Package Details - pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3

Vulnerability	Summary	Fixed by
VCID-1pw8-kzjs-aaah Aliases: CVE-2021-27291 GHSA-pq64-v7f5-gqh8 PYSEC-2021-141	In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-1ut1-kx68-aaab Aliases: CVE-2022-28203	A denial-of-service issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. When many files exist, requesting Special:NewFiles with actor as a condition can result in a very long running query.	1:1.35.2-1~bpo10+1 Affected by 0 other vulnerabilities. 1:1.35.13-1~deb11u1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-2e4k-6z9d-aaab Aliases: CVE-2022-47927	An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. When installing with a pre-existing data directory that has weak permissions, the SQLite files are created with file mode 0644, i.e., world readable to local users. These files include credentials data.	1:1.35.2-1~bpo10+1 Affected by 0 other vulnerabilities. 1:1.35.11-1~deb11u1 Affected by 7 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1~deb11u1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-2txe-5685-aaar Aliases: CVE-2019-12467 GHSA-6vfg-8ppv-h5hg	MediaWiki through 1.32.1 has Incorrect Access Control (issue 1 of 3). A spammer can use Special:ChangeEmail to send out spam with no rate limiting or ability to block them. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-38ac-xq25-aaaq Aliases: CVE-2021-30157	An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. On ChangesList special pages such as Special:RecentChanges and Special:Watchlist, some of the rcfilters-filter-* label messages are output in HTML unescaped, leading to XSS.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-3bm7-tmfe-aaar Aliases: CVE-2021-30458 GHSA-5pqx-77vf-85rw	An issue was discovered in Wikimedia Parsoid before 0.11.1 and 0.12.x before 0.12.2. An attacker can send crafted wikitext that Utils/WTUtils.php will transform by using a <meta> tag, bypassing sanitization steps, and potentially allowing for XSS.	1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-3f62-6xn7-aaab Aliases: CVE-2021-20270 GHSA-9w8r-397f-prfh PYSEC-2021-140	An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-3tye-xqmf-aaaa Aliases: CVE-2021-41798	MediaWiki before 1.36.2 allows XSS. Month related MediaWiki messages are not escaped before being used on the Special:Search results page.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-3wvj-4a66-aaaq Aliases: CVE-2021-30153	An issue was discovered in the VisualEditor extension in MediaWiki before 1.31.13, and 1.32.x through 1.35.x before 1.35.2. . When using VisualEditor to edit a MediaWiki user page belonging to an existing, but hidden, user, VisualEditor will disclose that the user exists. (It shouldn't because they are hidden.) This is related to ApiVisualEditor.	1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-4q2b-jwqb-aaas Aliases: CVE-2019-12470 GHSA-733q-m38x-q7cc	Wikimedia MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed log in RevisionDelete page is exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-59gg-vg2h-aaae Aliases: CVE-2023-29141 GHSA-5vj8-g3qg-4qh6	An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header.	1:1.35.2-1~bpo10+1 Affected by 0 other vulnerabilities. 1:1.35.11-1~deb11u1 Affected by 7 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1~deb11u1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-6bag-p9re-aaaf Aliases: CVE-2021-45038	An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. By using an action=rollback query, attackers can view private wiki contents.	1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-7jf3-227f-aaas Aliases: CVE-2020-25815 GHSA-2f58-vf6g-6p8x	An issue was discovered in MediaWiki 1.32.x through 1.34.x before 1.34.4. LogEventList::getFiltersDesc is insecurely using message text to build options names for an HTML multi-select field. The relevant code should use escaped() instead of text().	1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-7kgb-jke8-aaan Aliases: CVE-2021-41801	The ReplaceText extension through 1.41 for MediaWiki has Incorrect Access Control. When a user is blocked after submitting a replace job, the job is still run, even if it may be run at a later time (due to the job queue backlog)	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-7ufk-791q-aaae Aliases: CVE-2022-31090 GHSA-25mq-v84q-4j7r GMS-2022-2528	CURLOPT_HTTPAUTH option not cleared on change of origin	1:1.35.2-1~bpo10+1 Affected by 0 other vulnerabilities. 1:1.35.13-1~deb11u1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-7ycs-sa7m-aaar Aliases: CVE-2022-31042 GHSA-f2wf-25xc-69c9	Failure to strip the Cookie header on change in host or HTTP downgrade	1:1.35.2-1~bpo10+1 Affected by 0 other vulnerabilities. 1:1.35.13-1~deb11u1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-8ex1-6xse-aaab Aliases: CVE-2019-19709 GHSA-pjv5-vv93-p648	MediaWiki through 1.33.1 allows attackers to bypass the Title_blacklist protection mechanism by starting with an arbitrary title, establishing a non-resolvable redirect for the associated page, and using redirect=1 in the action API when editing that page.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-9cq6-c3xb-aaam Aliases: CVE-2021-35197	In MediaWiki before 1.31.15, 1.32.x through 1.35.x before 1.35.3, and 1.36.x before 1.36.1, bots have certain unintended API access. When a bot account has a "sitewide block" applied, it is able to still "purge" pages through the MediaWiki Action API (which a "sitewide block" should have prevented).	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-9u66-uk51-aaak Aliases: CVE-2022-34912	An issue was discovered in MediaWiki before 1.37.3 and 1.38.x before 1.38.1. The contributions-title, used on Special:Contributions, is used as page title without escaping. Hence, in a non-default configuration where a username contains HTML entities, it won't be escaped.	1:1.35.2-1~bpo10+1 Affected by 0 other vulnerabilities. 1:1.35.13-1~deb11u1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-9xdp-s1sy-aaaq Aliases: CVE-2018-0504 GHSA-hr8v-f4g2-p66f	Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains an information disclosure flaw in the Special:Redirect/logid	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-a3hy-ceqf-aaaq Aliases: CVE-2022-31043 GHSA-w248-ffj2-4v5q	Fix failure to strip Authorization header on HTTP downgrade	1:1.35.2-1~bpo10+1 Affected by 0 other vulnerabilities. 1:1.35.13-1~deb11u1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-aap7-715h-aaab Aliases: CVE-2019-12472 GHSA-7mqg-5fgh-xh4r	An Incorrect Access Control vulnerability was found in Wikimedia MediaWiki 1.18.0 through 1.32.1. It is possible to bypass the limits on IP range blocks ($wgBlockCIDRLimit) by using the API. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-ah5y-k5sb-aaap Aliases: CVE-2021-41800 GHSA-c8wv-qwwc-6j73	MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). Visiting Special:Contributions can sometimes result in a long running SQL query because PoolCounter protection is mishandled.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-akm6-w59h-aaak Aliases: CVE-2023-36674	An issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, 1.39.x before 1.39.4, and 1.40.x before 1.40.1. It is possible to bypass the Bad image list (aka badFile) by using the thumb parameter (aka Manualthumb) of the File syntax.	1:1.35.2-1~bpo10+1 Affected by 0 other vulnerabilities. 1:1.35.11-1~deb11u1 Affected by 7 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1~deb11u1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-at1z-tdh1-aaan Aliases: CVE-2023-45362	An issue was discovered in DifferenceEngine.php in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. diff-multi-sameuser (aka "X intermediate revisions by the same user not shown") ignores username suppression. This is an information leak.	1:1.35.2-1~bpo10+1 Affected by 0 other vulnerabilities. 1:1.35.13-1~deb11u1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1:1.39.5-1~deb12u1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-aus1-t1px-aaar Aliases: CVE-2023-45363 GHSA-w5fx-cx7f-6vr9	An issue was discovered in ApiPageSet.php in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. It allows attackers to cause a denial of service (unbounded loop and RequestTimeoutException) when querying pages redirected to other variants with redirects and converttitles set.	1:1.35.2-1~bpo10+1 Affected by 0 other vulnerabilities. 1:1.35.13-1~deb11u1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1:1.39.5-1~deb12u1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-azqw-d7r1-aaad Aliases: CVE-2018-0503 GHSA-mhfv-9h99-jwg7	Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where contrary to the documentation, $wgRateLimits entry for 'user' overrides that for 'newbie'.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-b5eq-97nn-aaah Aliases: CVE-2021-30155	An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. ContentModelChange does not check if a user has correct permissions to create and set the content model of a nonexistent page.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-bhgn-gct9-aaae Aliases: CVE-2019-12466 GHSA-27fw-r78j-h898	Wikimedia MediaWiki through 1.32.1 allows CSRF.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-bp3f-tajm-aaaf Aliases: CVE-2020-25814 GHSA-4vr7-m8p8-434h	In MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4, XSS related to jQuery can occur. The attacker creates a message with [javascript:payload xss] and turns it into a jQuery object with mw.message().parse(). The expected result is that the jQuery object does not contain an <a> tag (or it does not have a href attribute, or it's empty, etc.). The actual result is that the object contains an <a href ="javascript... that executes when clicked.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-dhd7-4u65-aaaa Aliases: CVE-2020-17367	Firejail through 0.9.62 does not honor the -- end-of-options indicator after the --output option, which may lead to command injection.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-egth-zjt7-aaab Aliases: CVE-2021-44856	An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. A title blocked by AbuseFilter can be created via Special:ChangeContentModel due to the mishandling of the EditFilterMergedContent hook return value.	1:1.35.2-1~bpo10+1 Affected by 0 other vulnerabilities. 1:1.35.13-1~deb11u1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-f89j-dkdk-aaah Aliases: CVE-2022-41765	An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. HTMLUserTextField exposes the existence of hidden users.	1:1.35.2-1~bpo10+1 Affected by 0 other vulnerabilities. 1:1.35.13-1~deb11u1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-f9ks-vah3-aaaa Aliases: CVE-2019-12474 GHSA-2qrr-c2gh-pr35	Wikimedia MediaWiki 1.23.0 through 1.32.1 has an information leak. Privileged API responses that include whether a recent change has been patrolled may be cached publicly. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-faaf-e9j7-aaac Aliases: CVE-2020-35477	MediaWiki before 1.35.1 blocks legitimate attempts to hide log entries in some situations. If one sets MediaWiki:Mainpage to Special:MyLanguage/Main Page, visits a log entry on Special:Log, and toggles the "Change visibility of selected log entries" checkbox (or a tags checkbox) next to it, there is a redirection to the main page's action=historysubmit (instead of the desired behavior in which a revision-deletion form appears).	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-fbrx-yzny-aaae Aliases: CVE-2021-41799	MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). ApiQueryBacklinks (action=query&list=backlinks) can cause a full table scan.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-fe1a-1s8p-aaaf Aliases: CVE-2019-16738 GHSA-7hwr-f745-5rwq	In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-fwhc-xtwd-aaag Aliases: CVE-2019-12469 GHSA-x3fr-w7r5-x7rg	MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed username or log in Special:EditTags are exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-g6qq-mucg-aaar Aliases: CVE-2020-25812 GHSA-rj9p-8jxj-2ch4	An issue was discovered in MediaWiki 1.34.x before 1.34.4. On Special:Contributions, the NS filter uses unescaped messages as keys in the option key for an HTMLForm specifier. This is vulnerable to a mild XSS if one of those messages is changed to include raw HTML.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-gbqb-um5f-aaac Aliases: CVE-2022-41767	An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. When changes made by an IP address are reassigned to a user (using reassignEdits.php), the changes will still be attributed to the IP address on Special:Contributions when doing a range lookup.	1:1.35.2-1~bpo10+1 Affected by 0 other vulnerabilities. 1:1.35.13-1~deb11u1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-hgcw-v93v-aaad Aliases: CVE-2020-25828 GHSA-h8qx-mj6v-2934	An issue was discovered in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4. The non-jqueryMsg version of mw.message().parse() doesn't escape HTML. This affects both message contents (which are generally safe) and the parameters (which can be based on user input). (When jqueryMsg is loaded, it correctly accepts only whitelisted tags in message contents, and escapes all parameters. Situations with an unloaded jqueryMsg are rare in practice, but can for example occur for Special:SpecialPages on a wiki with no extensions installed.)	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-hphf-74rm-aaaa Aliases: CVE-2022-28202	An XSS issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. The widthheight, widthheightpage, and nbytes properties of messages are not escaped when used in galleries or Special:RevisionDelete.	1:1.35.2-1~bpo10+1 Affected by 0 other vulnerabilities. 1:1.35.13-1~deb11u1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-jwgf-c1pr-aaan Aliases: CVE-2020-15005 GHSA-xpv7-93cm-4mxv	In MediaWiki before 1.31.8, 1.32.x and 1.33.x before 1.33.4, and 1.34.x before 1.34.2, private wikis behind a caching server using the img_auth.php image authorization security feature may have had their files cached publicly, so any unauthorized user could view them. This occurs because Cache-Control and Vary headers were mishandled.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-k1m8-1qs1-aaab Aliases: CVE-2020-17368	Firejail through 0.9.62 mishandles shell metacharacters during use of the --output or --output-stderr option, which may lead to command injection.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-k3vw-m137-aaan Aliases: CVE-2020-10960 GHSA-pfm2-mqwj-ggm5	In MediaWiki before 1.34.1, users can add various Cascading Style Sheets (CSS) classes (which can affect what content is shown or hidden in the user interface) to arbitrary DOM nodes via HTML content within a MediaWiki page. This occurs because jquery.makeCollapsible allows applying an event handler to any Cascading Style Sheets (CSS) selector. There is no known way to exploit this for cross-site scripting (XSS).	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-keup-3kbx-aaaj Aliases: CVE-2020-35480	An issue was discovered in MediaWiki before 1.35.1. Missing users (accounts that don't exist) and hidden users (accounts that have been explicitly hidden due to being abusive, or similar) that the viewer cannot see are handled differently, exposing sensitive information about the hidden status to unprivileged viewers. This exists on various code paths.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-m8vg-2sz1-aaas Aliases: CVE-2021-44855	An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. There is Blind Stored XSS via a URL to the Upload Image feature.	1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-mj69-gx7y-aaah Aliases: CVE-2021-30152	An issue was discovered in MediaWiki before 1.31.13 and 1.32.x through 1.35.x before 1.35.2. When using the MediaWiki API to "protect" a page, a user is currently able to protect to a higher level than they currently have permissions for.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-n724-h9bq-aaak Aliases: CVE-2020-25813 GHSA-c4rj-wrmq-52rj	In MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4, Special:UserRights exposes the existence of hidden users.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-p4de-8vmj-aaah Aliases: CVE-2021-30158	An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. Blocked users are unable to use Special:ResetTokens. This has security relevance because a blocked user might have accidentally shared a token, or might know that a token has been compromised, and yet is not able to block any potential future use of the token by an unauthorized party.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-pb6q-3j39-aaaf Aliases: CVE-2021-44854	An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. The REST API publicly caches results from private wikis.	1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-prsw-emhu-aaaf Aliases: CVE-2020-36649 GHSA-798h-g4j5-5537	PapaParse Inefficient Regular Expression Complexity vulnerability	1:1.35.2-1~bpo10+1 Affected by 0 other vulnerabilities. 1:1.35.13-1~deb11u1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-qb3k-17vr-aaab Aliases: CVE-2023-45360	An issue was discovered in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. There is XSS in youhavenewmessagesmanyusers and youhavenewmessages i18n messages. This is related to MediaWiki:Youhavenewmessagesfromusers.	1:1.35.2-1~bpo10+1 Affected by 0 other vulnerabilities. 1:1.35.13-1~deb11u1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1:1.39.5-1~deb12u1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-qhwj-913t-aaan Aliases: CVE-2020-35478	MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. MediaWiki:blanknamespace potentially can be output as raw HTML with SCRIPT tags via LogFormatter::makePageLink(). This affects MediaWiki 1.33.0 and later.	1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-qy5g-zjex-aaan Aliases: CVE-2022-29248 GHSA-cwmx-hcrq-mhc3	Cross-domain cookie leakage in Guzzle	1:1.35.2-1~bpo10+1 Affected by 0 other vulnerabilities. 1:1.35.13-1~deb11u1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-qynw-xq2t-aaap Aliases: CVE-2019-12468 GHSA-wrhx-3pxr-6vgg	An Incorrect Access Control vulnerability was found in Wikimedia MediaWiki 1.27.0 through 1.32.1. Directly POSTing to Special:ChangeEmail would allow for bypassing re-authentication, allowing for potential account takeover.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-ru64-mr55-aaab Aliases: CVE-2020-35474	In MediaWiki before 1.35.1, the combination of Html::rawElement and Message::text leads to XSS because the definition of MediaWiki:recentchanges-legend-watchlistexpiry can be changed onwiki so that the output is raw HTML.	1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-s1mx-f4zv-aaap Aliases: CVE-2024-34506	An issue was discovered in includes/specials/SpecialMovePage.php in MediaWiki before 1.39.7, 1.40.x before 1.40.3, and 1.41.x before 1.41.1. If a user with the necessary rights to move the page opens Special:MovePage for a page with tens of thousands of subpages, then the page will exceed the maximum request time, leading to a denial of service.	1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-sa8w-pzne-aaas Aliases: CVE-2018-0505 GHSA-5c6w-f4w2-2grp	Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where BotPasswords can bypass CentralAuth's account lock	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-t8e4-5s1r-aaar Aliases: CVE-2023-36675	An issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, and 1.39.x before 1.39.4. BlockLogFormatter.php in BlockLogFormatter allows XSS in the partial blocks feature.	1:1.35.11-1~deb11u1 Affected by 7 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-tm36-42qs-aaah Aliases: CVE-2019-12471 GHSA-2rm7-xxx8-35jh	Wikimedia MediaWiki 1.30.0 through 1.32.1 has XSS. Loading user JavaScript from a non-existent account allows anyone to create the account, and perform XSS on users loading that script. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-tr2g-xya5-aaaj Aliases: CVE-2022-28201	An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message.	1:1.35.2-1~bpo10+1 Affected by 0 other vulnerabilities. 1:1.35.13-1~deb11u1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-tv97-anfg-aaam Aliases: CVE-2019-11358 GHSA-6c3j-c64m-qhgq	jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-urwg-y5xz-aaag Aliases: CVE-2023-3550	Mediawiki v1.40.0 does not validate namespaces used in XML files. Therefore, if the instance administrator allows XML file uploads, a remote attacker with a low-privileged user account can use this exploit to become an administrator by sending a malicious link to the instance administrator.	1:1.35.2-1~bpo10+1 Affected by 0 other vulnerabilities. 1:1.35.13-1~deb11u1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1:1.39.5-1~deb12u1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-uy1p-tvx3-aaah Aliases: CVE-2020-35479	MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. Language::translateBlockExpiry itself does not escape in all code paths. For example, the return of Language::userTimeAndDate is is always unsafe for HTML in a month value. This affects MediaWiki 1.12.0 and later.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-w83q-c41p-aaan Aliases: CVE-2023-51704	An issue was discovered in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. In includes/logging/RightsLogFormatter.php, group-*-member messages can result in XSS on Special:log/rights.	1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1:1.39.1-2~bpo11+1 Affected by 0 other vulnerabilities. 1:1.39.7-1~deb12u1 Affected by 0 other vulnerabilities.
VCID-wedv-d1u3-aaaj Aliases: DSA-5651-1 mediawiki	security update	1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-xb7m-ngk2-aaae Aliases: CVE-2020-25827 GHSA-rqvj-fc2x-99q6	An issue was discovered in the OATHAuth extension in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4. For Wikis using OATHAuth on a farm/cluster (such as via CentralAuth), rate limiting of OATH tokens is only done on a single site level. Thus, multiple requests can be made across many wikis/sites concurrently.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-y687-awyz-aaag Aliases: CVE-2020-35475	In MediaWiki before 1.35.1, the messages userrights-expiry-current and userrights-expiry-none can contain raw HTML. XSS can happen when a user visits Special:UserRights but does not have rights to change all userrights, and the table on the left side has unchangeable groups in it. (The right column with the changeable groups is not affected and is escaped correctly.)	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-y6ym-xe1c-aaaq Aliases: CVE-2021-30154	An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. On Special:NewFiles, all the mediastatistics-header-* messages are output in HTML unescaped, leading to XSS.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-ycgv-unnm-aaag Aliases: CVE-2022-31091 GHSA-q559-8m2m-g699 GMS-2022-2529	Change in port should be considered a change in origin	1:1.35.2-1~bpo10+1 Affected by 0 other vulnerabilities. 1:1.35.13-1~deb11u1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-ydzn-t292-aaad Aliases: CVE-2021-44858	An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. It is possible to use action=edit&undo= followed by action=mcrundo and action=mcrrestore to view private pages on a private wiki that has at least one page set in $wgWhitelistRead.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-zbqw-eg13-aaam Aliases: CVE-2021-44857	An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. It is possible to use action=mcrundo followed by action=mcrrestore to replace the content of any arbitrary page (that the user doesn't have edit rights for). This applies to any public wiki, or a private wiki that has at least one page set in $wgWhitelistRead.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-zh8q-p26k-aaas Aliases: CVE-2022-34911	An issue was discovered in MediaWiki before 1.35.7, 1.36.x and 1.37.x before 1.37.3, and 1.38.x before 1.38.1. XSS can occur in configurations that allow a JavaScript payload in a username. After account creation, when it sets the page title to "Welcome" followed by the username, the username is not escaped: SpecialCreateAccount::successfulAction() calls ::showSuccessPage() with a message as second parameter, and OutputPage::setPageTitle() uses text().	1:1.35.2-1~bpo10+1 Affected by 0 other vulnerabilities. 1:1.35.13-1~deb11u1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-zqf1-jg5k-aaap Aliases: CVE-2019-12473 GHSA-33xw-x3pr-rvqj	Wikimedia MediaWiki 1.27.0 through 1.32.1 might allow DoS. Passing invalid titles to the API could cause a DoS by querying the entire watchlist table. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-zyhx-9g42-aaae Aliases: CVE-2021-30159	An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. Users can bypass intended restrictions on deleting pages in certain "fast double move" situations. MovePage::isValidMoveTarget() uses FOR UPDATE, but it's only called if Title::getArticleID() returns non-zero with no special flags. Next, MovePage::moveToInternal() will delete the page if getArticleID(READ_LATEST) is non-zero. Therefore, if the page is missing in the replica DB, isValidMove() will return true, and then moveToInternal() will unconditionally delete the page if it can be found in the master.	1:1.31.16-1+deb10u2 Affected by 60 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1:1.35.13-1+deb11u2 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-1pw8-kzjs-aaah
Aliases:
CVE-2021-27291
GHSA-pq64-v7f5-gqh8
PYSEC-2021-141

In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-1ut1-kx68-aaab
Aliases:
CVE-2022-28203

A denial-of-service issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. When many files exist, requesting Special:NewFiles with actor as a condition can result in a very long running query.

1:1.35.2-1~bpo10+1
Affected by 0 other vulnerabilities.

1:1.35.13-1~deb11u1
Affected by 1 other vulnerability.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-2e4k-6z9d-aaab
Aliases:
CVE-2022-47927

An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. When installing with a pre-existing data directory that has weak permissions, the SQLite files are created with file mode 0644, i.e., world readable to local users. These files include credentials data.

1:1.35.2-1~bpo10+1
Affected by 0 other vulnerabilities.

1:1.35.11-1~deb11u1
Affected by 7 other vulnerabilities.

1:1.35.13-1~deb11u1
Affected by 1 other vulnerability.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-2txe-5685-aaar
Aliases:
CVE-2019-12467
GHSA-6vfg-8ppv-h5hg

MediaWiki through 1.32.1 has Incorrect Access Control (issue 1 of 3). A spammer can use Special:ChangeEmail to send out spam with no rate limiting or ability to block them. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

VCID-38ac-xq25-aaaq
Aliases:
CVE-2021-30157

An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. On ChangesList special pages such as Special:RecentChanges and Special:Watchlist, some of the rcfilters-filter-* label messages are output in HTML unescaped, leading to XSS.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-3bm7-tmfe-aaar
Aliases:
CVE-2021-30458
GHSA-5pqx-77vf-85rw

An issue was discovered in Wikimedia Parsoid before 0.11.1 and 0.12.x before 0.12.2. An attacker can send crafted wikitext that Utils/WTUtils.php will transform by using a <meta> tag, bypassing sanitization steps, and potentially allowing for XSS.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-3f62-6xn7-aaab
Aliases:
CVE-2021-20270
GHSA-9w8r-397f-prfh
PYSEC-2021-140

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-3tye-xqmf-aaaa
Aliases:
CVE-2021-41798

MediaWiki before 1.36.2 allows XSS. Month related MediaWiki messages are not escaped before being used on the Special:Search results page.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-3wvj-4a66-aaaq
Aliases:
CVE-2021-30153

An issue was discovered in the VisualEditor extension in MediaWiki before 1.31.13, and 1.32.x through 1.35.x before 1.35.2. . When using VisualEditor to edit a MediaWiki user page belonging to an existing, but hidden, user, VisualEditor will disclose that the user exists. (It shouldn't because they are hidden.) This is related to ApiVisualEditor.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-4q2b-jwqb-aaas
Aliases:
CVE-2019-12470
GHSA-733q-m38x-q7cc

Wikimedia MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed log in RevisionDelete page is exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

VCID-59gg-vg2h-aaae
Aliases:
CVE-2023-29141
GHSA-5vj8-g3qg-4qh6

An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header.

1:1.35.2-1~bpo10+1
Affected by 0 other vulnerabilities.

1:1.35.11-1~deb11u1
Affected by 7 other vulnerabilities.

1:1.35.13-1~deb11u1
Affected by 1 other vulnerability.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-6bag-p9re-aaaf
Aliases:
CVE-2021-45038

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. By using an action=rollback query, attackers can view private wiki contents.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-7jf3-227f-aaas
Aliases:
CVE-2020-25815
GHSA-2f58-vf6g-6p8x

An issue was discovered in MediaWiki 1.32.x through 1.34.x before 1.34.4. LogEventList::getFiltersDesc is insecurely using message text to build options names for an HTML multi-select field. The relevant code should use escaped() instead of text().

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-7kgb-jke8-aaan
Aliases:
CVE-2021-41801

The ReplaceText extension through 1.41 for MediaWiki has Incorrect Access Control. When a user is blocked after submitting a replace job, the job is still run, even if it may be run at a later time (due to the job queue backlog)

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-7ufk-791q-aaae
Aliases:
CVE-2022-31090
GHSA-25mq-v84q-4j7r
GMS-2022-2528

CURLOPT_HTTPAUTH option not cleared on change of origin

1:1.35.2-1~bpo10+1
Affected by 0 other vulnerabilities.

1:1.35.13-1~deb11u1
Affected by 1 other vulnerability.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-7ycs-sa7m-aaar
Aliases:
CVE-2022-31042
GHSA-f2wf-25xc-69c9

Failure to strip the Cookie header on change in host or HTTP downgrade

1:1.35.2-1~bpo10+1
Affected by 0 other vulnerabilities.

1:1.35.13-1~deb11u1
Affected by 1 other vulnerability.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-8ex1-6xse-aaab
Aliases:
CVE-2019-19709
GHSA-pjv5-vv93-p648

MediaWiki through 1.33.1 allows attackers to bypass the Title_blacklist protection mechanism by starting with an arbitrary title, establishing a non-resolvable redirect for the associated page, and using redirect=1 in the action API when editing that page.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

VCID-9cq6-c3xb-aaam
Aliases:
CVE-2021-35197

In MediaWiki before 1.31.15, 1.32.x through 1.35.x before 1.35.3, and 1.36.x before 1.36.1, bots have certain unintended API access. When a bot account has a "sitewide block" applied, it is able to still "purge" pages through the MediaWiki Action API (which a "sitewide block" should have prevented).

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-9u66-uk51-aaak
Aliases:
CVE-2022-34912

An issue was discovered in MediaWiki before 1.37.3 and 1.38.x before 1.38.1. The contributions-title, used on Special:Contributions, is used as page title without escaping. Hence, in a non-default configuration where a username contains HTML entities, it won't be escaped.

1:1.35.2-1~bpo10+1
Affected by 0 other vulnerabilities.

1:1.35.13-1~deb11u1
Affected by 1 other vulnerability.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-9xdp-s1sy-aaaq
Aliases:
CVE-2018-0504
GHSA-hr8v-f4g2-p66f

Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains an information disclosure flaw in the Special:Redirect/logid

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

VCID-a3hy-ceqf-aaaq
Aliases:
CVE-2022-31043
GHSA-w248-ffj2-4v5q

Fix failure to strip Authorization header on HTTP downgrade

1:1.35.2-1~bpo10+1
Affected by 0 other vulnerabilities.

1:1.35.13-1~deb11u1
Affected by 1 other vulnerability.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-aap7-715h-aaab
Aliases:
CVE-2019-12472
GHSA-7mqg-5fgh-xh4r

An Incorrect Access Control vulnerability was found in Wikimedia MediaWiki 1.18.0 through 1.32.1. It is possible to bypass the limits on IP range blocks ($wgBlockCIDRLimit) by using the API. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

VCID-ah5y-k5sb-aaap
Aliases:
CVE-2021-41800
GHSA-c8wv-qwwc-6j73

MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). Visiting Special:Contributions can sometimes result in a long running SQL query because PoolCounter protection is mishandled.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-akm6-w59h-aaak
Aliases:
CVE-2023-36674

An issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, 1.39.x before 1.39.4, and 1.40.x before 1.40.1. It is possible to bypass the Bad image list (aka badFile) by using the thumb parameter (aka Manualthumb) of the File syntax.

1:1.35.2-1~bpo10+1
Affected by 0 other vulnerabilities.

1:1.35.11-1~deb11u1
Affected by 7 other vulnerabilities.

1:1.35.13-1~deb11u1
Affected by 1 other vulnerability.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-at1z-tdh1-aaan
Aliases:
CVE-2023-45362

An issue was discovered in DifferenceEngine.php in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. diff-multi-sameuser (aka "X intermediate revisions by the same user not shown") ignores username suppression. This is an information leak.

1:1.35.2-1~bpo10+1
Affected by 0 other vulnerabilities.

1:1.35.13-1~deb11u1
Affected by 1 other vulnerability.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

1:1.39.5-1~deb12u1
Affected by 1 other vulnerability.

VCID-aus1-t1px-aaar
Aliases:
CVE-2023-45363
GHSA-w5fx-cx7f-6vr9

An issue was discovered in ApiPageSet.php in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. It allows attackers to cause a denial of service (unbounded loop and RequestTimeoutException) when querying pages redirected to other variants with redirects and converttitles set.

1:1.35.2-1~bpo10+1
Affected by 0 other vulnerabilities.

1:1.35.13-1~deb11u1
Affected by 1 other vulnerability.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

1:1.39.5-1~deb12u1
Affected by 1 other vulnerability.

VCID-azqw-d7r1-aaad
Aliases:
CVE-2018-0503
GHSA-mhfv-9h99-jwg7

Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where contrary to the documentation, $wgRateLimits entry for 'user' overrides that for 'newbie'.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

VCID-b5eq-97nn-aaah
Aliases:
CVE-2021-30155

An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. ContentModelChange does not check if a user has correct permissions to create and set the content model of a nonexistent page.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-bhgn-gct9-aaae
Aliases:
CVE-2019-12466
GHSA-27fw-r78j-h898

Wikimedia MediaWiki through 1.32.1 allows CSRF.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

VCID-bp3f-tajm-aaaf
Aliases:
CVE-2020-25814
GHSA-4vr7-m8p8-434h

In MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4, XSS related to jQuery can occur. The attacker creates a message with [javascript:payload xss] and turns it into a jQuery object with mw.message().parse(). The expected result is that the jQuery object does not contain an <a> tag (or it does not have a href attribute, or it's empty, etc.). The actual result is that the object contains an <a href ="javascript... that executes when clicked.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-dhd7-4u65-aaaa
Aliases:
CVE-2020-17367

Firejail through 0.9.62 does not honor the -- end-of-options indicator after the --output option, which may lead to command injection.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

VCID-egth-zjt7-aaab
Aliases:
CVE-2021-44856

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. A title blocked by AbuseFilter can be created via Special:ChangeContentModel due to the mishandling of the EditFilterMergedContent hook return value.

1:1.35.2-1~bpo10+1
Affected by 0 other vulnerabilities.

1:1.35.13-1~deb11u1
Affected by 1 other vulnerability.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-f89j-dkdk-aaah
Aliases:
CVE-2022-41765

An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. HTMLUserTextField exposes the existence of hidden users.

1:1.35.2-1~bpo10+1
Affected by 0 other vulnerabilities.

1:1.35.13-1~deb11u1
Affected by 1 other vulnerability.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-f9ks-vah3-aaaa
Aliases:
CVE-2019-12474
GHSA-2qrr-c2gh-pr35

Wikimedia MediaWiki 1.23.0 through 1.32.1 has an information leak. Privileged API responses that include whether a recent change has been patrolled may be cached publicly. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

VCID-faaf-e9j7-aaac
Aliases:
CVE-2020-35477

MediaWiki before 1.35.1 blocks legitimate attempts to hide log entries in some situations. If one sets MediaWiki:Mainpage to Special:MyLanguage/Main Page, visits a log entry on Special:Log, and toggles the "Change visibility of selected log entries" checkbox (or a tags checkbox) next to it, there is a redirection to the main page's action=historysubmit (instead of the desired behavior in which a revision-deletion form appears).

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-fbrx-yzny-aaae
Aliases:
CVE-2021-41799

MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). ApiQueryBacklinks (action=query&list=backlinks) can cause a full table scan.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-fe1a-1s8p-aaaf
Aliases:
CVE-2019-16738
GHSA-7hwr-f745-5rwq

In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

VCID-fwhc-xtwd-aaag
Aliases:
CVE-2019-12469
GHSA-x3fr-w7r5-x7rg

MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed username or log in Special:EditTags are exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

VCID-g6qq-mucg-aaar
Aliases:
CVE-2020-25812
GHSA-rj9p-8jxj-2ch4

An issue was discovered in MediaWiki 1.34.x before 1.34.4. On Special:Contributions, the NS filter uses unescaped messages as keys in the option key for an HTMLForm specifier. This is vulnerable to a mild XSS if one of those messages is changed to include raw HTML.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-gbqb-um5f-aaac
Aliases:
CVE-2022-41767

An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. When changes made by an IP address are reassigned to a user (using reassignEdits.php), the changes will still be attributed to the IP address on Special:Contributions when doing a range lookup.

1:1.35.2-1~bpo10+1
Affected by 0 other vulnerabilities.

1:1.35.13-1~deb11u1
Affected by 1 other vulnerability.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-hgcw-v93v-aaad
Aliases:
CVE-2020-25828
GHSA-h8qx-mj6v-2934

An issue was discovered in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4. The non-jqueryMsg version of mw.message().parse() doesn't escape HTML. This affects both message contents (which are generally safe) and the parameters (which can be based on user input). (When jqueryMsg is loaded, it correctly accepts only whitelisted tags in message contents, and escapes all parameters. Situations with an unloaded jqueryMsg are rare in practice, but can for example occur for Special:SpecialPages on a wiki with no extensions installed.)

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-hphf-74rm-aaaa
Aliases:
CVE-2022-28202

An XSS issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. The widthheight, widthheightpage, and nbytes properties of messages are not escaped when used in galleries or Special:RevisionDelete.

1:1.35.2-1~bpo10+1
Affected by 0 other vulnerabilities.

1:1.35.13-1~deb11u1
Affected by 1 other vulnerability.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-jwgf-c1pr-aaan
Aliases:
CVE-2020-15005
GHSA-xpv7-93cm-4mxv

In MediaWiki before 1.31.8, 1.32.x and 1.33.x before 1.33.4, and 1.34.x before 1.34.2, private wikis behind a caching server using the img_auth.php image authorization security feature may have had their files cached publicly, so any unauthorized user could view them. This occurs because Cache-Control and Vary headers were mishandled.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

VCID-k1m8-1qs1-aaab
Aliases:
CVE-2020-17368

Firejail through 0.9.62 mishandles shell metacharacters during use of the --output or --output-stderr option, which may lead to command injection.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

VCID-k3vw-m137-aaan
Aliases:
CVE-2020-10960
GHSA-pfm2-mqwj-ggm5

In MediaWiki before 1.34.1, users can add various Cascading Style Sheets (CSS) classes (which can affect what content is shown or hidden in the user interface) to arbitrary DOM nodes via HTML content within a MediaWiki page. This occurs because jquery.makeCollapsible allows applying an event handler to any Cascading Style Sheets (CSS) selector. There is no known way to exploit this for cross-site scripting (XSS).

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

VCID-keup-3kbx-aaaj
Aliases:
CVE-2020-35480

An issue was discovered in MediaWiki before 1.35.1. Missing users (accounts that don't exist) and hidden users (accounts that have been explicitly hidden due to being abusive, or similar) that the viewer cannot see are handled differently, exposing sensitive information about the hidden status to unprivileged viewers. This exists on various code paths.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-m8vg-2sz1-aaas
Aliases:
CVE-2021-44855

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. There is Blind Stored XSS via a URL to the Upload Image feature.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-mj69-gx7y-aaah
Aliases:
CVE-2021-30152

An issue was discovered in MediaWiki before 1.31.13 and 1.32.x through 1.35.x before 1.35.2. When using the MediaWiki API to "protect" a page, a user is currently able to protect to a higher level than they currently have permissions for.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-n724-h9bq-aaak
Aliases:
CVE-2020-25813
GHSA-c4rj-wrmq-52rj

In MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4, Special:UserRights exposes the existence of hidden users.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-p4de-8vmj-aaah
Aliases:
CVE-2021-30158

An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. Blocked users are unable to use Special:ResetTokens. This has security relevance because a blocked user might have accidentally shared a token, or might know that a token has been compromised, and yet is not able to block any potential future use of the token by an unauthorized party.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-pb6q-3j39-aaaf
Aliases:
CVE-2021-44854

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. The REST API publicly caches results from private wikis.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-prsw-emhu-aaaf
Aliases:
CVE-2020-36649
GHSA-798h-g4j5-5537

PapaParse Inefficient Regular Expression Complexity vulnerability

1:1.35.2-1~bpo10+1
Affected by 0 other vulnerabilities.

1:1.35.13-1~deb11u1
Affected by 1 other vulnerability.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-qb3k-17vr-aaab
Aliases:
CVE-2023-45360

An issue was discovered in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. There is XSS in youhavenewmessagesmanyusers and youhavenewmessages i18n messages. This is related to MediaWiki:Youhavenewmessagesfromusers.

1:1.35.2-1~bpo10+1
Affected by 0 other vulnerabilities.

1:1.35.13-1~deb11u1
Affected by 1 other vulnerability.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

1:1.39.5-1~deb12u1
Affected by 1 other vulnerability.

VCID-qhwj-913t-aaan
Aliases:
CVE-2020-35478

MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. MediaWiki:blanknamespace potentially can be output as raw HTML with SCRIPT tags via LogFormatter::makePageLink(). This affects MediaWiki 1.33.0 and later.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-qy5g-zjex-aaan
Aliases:
CVE-2022-29248
GHSA-cwmx-hcrq-mhc3

Cross-domain cookie leakage in Guzzle

1:1.35.2-1~bpo10+1
Affected by 0 other vulnerabilities.

1:1.35.13-1~deb11u1
Affected by 1 other vulnerability.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-qynw-xq2t-aaap
Aliases:
CVE-2019-12468
GHSA-wrhx-3pxr-6vgg

An Incorrect Access Control vulnerability was found in Wikimedia MediaWiki 1.27.0 through 1.32.1. Directly POSTing to Special:ChangeEmail would allow for bypassing re-authentication, allowing for potential account takeover.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

VCID-ru64-mr55-aaab
Aliases:
CVE-2020-35474

In MediaWiki before 1.35.1, the combination of Html::rawElement and Message::text leads to XSS because the definition of MediaWiki:recentchanges-legend-watchlistexpiry can be changed onwiki so that the output is raw HTML.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-s1mx-f4zv-aaap
Aliases:
CVE-2024-34506

An issue was discovered in includes/specials/SpecialMovePage.php in MediaWiki before 1.39.7, 1.40.x before 1.40.3, and 1.41.x before 1.41.1. If a user with the necessary rights to move the page opens Special:MovePage for a page with tens of thousands of subpages, then the page will exceed the maximum request time, leading to a denial of service.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-sa8w-pzne-aaas
Aliases:
CVE-2018-0505
GHSA-5c6w-f4w2-2grp

Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where BotPasswords can bypass CentralAuth's account lock

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

VCID-t8e4-5s1r-aaar
Aliases:
CVE-2023-36675

An issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, and 1.39.x before 1.39.4. BlockLogFormatter.php in BlockLogFormatter allows XSS in the partial blocks feature.

1:1.35.11-1~deb11u1
Affected by 7 other vulnerabilities.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-tm36-42qs-aaah
Aliases:
CVE-2019-12471
GHSA-2rm7-xxx8-35jh

Wikimedia MediaWiki 1.30.0 through 1.32.1 has XSS. Loading user JavaScript from a non-existent account allows anyone to create the account, and perform XSS on users loading that script. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

VCID-tr2g-xya5-aaaj
Aliases:
CVE-2022-28201

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message.

1:1.35.2-1~bpo10+1
Affected by 0 other vulnerabilities.

1:1.35.13-1~deb11u1
Affected by 1 other vulnerability.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-tv97-anfg-aaam
Aliases:
CVE-2019-11358
GHSA-6c3j-c64m-qhgq

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

VCID-urwg-y5xz-aaag
Aliases:
CVE-2023-3550

Mediawiki v1.40.0 does not validate namespaces used in XML files. Therefore, if the instance administrator allows XML file uploads, a remote attacker with a low-privileged user account can use this exploit to become an administrator by sending a malicious link to the instance administrator.

1:1.35.2-1~bpo10+1
Affected by 0 other vulnerabilities.

1:1.35.13-1~deb11u1
Affected by 1 other vulnerability.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

1:1.39.5-1~deb12u1
Affected by 1 other vulnerability.

VCID-uy1p-tvx3-aaah
Aliases:
CVE-2020-35479

MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. Language::translateBlockExpiry itself does not escape in all code paths. For example, the return of Language::userTimeAndDate is is always unsafe for HTML in a month value. This affects MediaWiki 1.12.0 and later.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-w83q-c41p-aaan
Aliases:
CVE-2023-51704

An issue was discovered in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. In includes/logging/RightsLogFormatter.php, group-*-member messages can result in XSS on Special:log/rights.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

1:1.39.1-2~bpo11+1
Affected by 0 other vulnerabilities.

1:1.39.7-1~deb12u1
Affected by 0 other vulnerabilities.

VCID-wedv-d1u3-aaaj
Aliases:
DSA-5651-1 mediawiki

security update

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-xb7m-ngk2-aaae
Aliases:
CVE-2020-25827
GHSA-rqvj-fc2x-99q6

An issue was discovered in the OATHAuth extension in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4. For Wikis using OATHAuth on a farm/cluster (such as via CentralAuth), rate limiting of OATH tokens is only done on a single site level. Thus, multiple requests can be made across many wikis/sites concurrently.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-y687-awyz-aaag
Aliases:
CVE-2020-35475

In MediaWiki before 1.35.1, the messages userrights-expiry-current and userrights-expiry-none can contain raw HTML. XSS can happen when a user visits Special:UserRights but does not have rights to change all userrights, and the table on the left side has unchangeable groups in it. (The right column with the changeable groups is not affected and is escaped correctly.)

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-y6ym-xe1c-aaaq
Aliases:
CVE-2021-30154

An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. On Special:NewFiles, all the mediastatistics-header-* messages are output in HTML unescaped, leading to XSS.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-ycgv-unnm-aaag
Aliases:
CVE-2022-31091
GHSA-q559-8m2m-g699
GMS-2022-2529

Change in port should be considered a change in origin

1:1.35.2-1~bpo10+1
Affected by 0 other vulnerabilities.

1:1.35.13-1~deb11u1
Affected by 1 other vulnerability.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-ydzn-t292-aaad
Aliases:
CVE-2021-44858

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. It is possible to use action=edit&undo= followed by action=mcrundo and action=mcrrestore to view private pages on a private wiki that has at least one page set in $wgWhitelistRead.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-zbqw-eg13-aaam
Aliases:
CVE-2021-44857

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. It is possible to use action=mcrundo followed by action=mcrrestore to replace the content of any arbitrary page (that the user doesn't have edit rights for). This applies to any public wiki, or a private wiki that has at least one page set in $wgWhitelistRead.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-zh8q-p26k-aaas
Aliases:
CVE-2022-34911

An issue was discovered in MediaWiki before 1.35.7, 1.36.x and 1.37.x before 1.37.3, and 1.38.x before 1.38.1. XSS can occur in configurations that allow a JavaScript payload in a username. After account creation, when it sets the page title to "Welcome" followed by the username, the username is not escaped: SpecialCreateAccount::successfulAction() calls ::showSuccessPage() with a message as second parameter, and OutputPage::setPageTitle() uses text().

1:1.35.2-1~bpo10+1
Affected by 0 other vulnerabilities.

1:1.35.13-1~deb11u1
Affected by 1 other vulnerability.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

VCID-zqf1-jg5k-aaap
Aliases:
CVE-2019-12473
GHSA-33xw-x3pr-rvqj

Wikimedia MediaWiki 1.27.0 through 1.32.1 might allow DoS. Passing invalid titles to the API could cause a DoS by querying the entire watchlist table. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

VCID-zyhx-9g42-aaae
Aliases:
CVE-2021-30159

An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. Users can bypass intended restrictions on deleting pages in certain "fast double move" situations. MovePage::isValidMoveTarget() uses FOR UPDATE, but it's only called if Title::getArticleID() returns non-zero with no special flags. Next, MovePage::moveToInternal() will delete the page if getArticleID(READ_LATEST) is non-zero. Therefore, if the page is missing in the replica DB, isValidMove() will return true, and then moveToInternal() will unconditionally delete the page if it can be found in the master.

1:1.31.16-1+deb10u2
Affected by 60 other vulnerabilities.

1:1.35.13-1+deb11u2
Affected by 8 other vulnerabilities.

Vulnerability	Summary	Aliases
VCID-2txe-5685-aaar	MediaWiki through 1.32.1 has Incorrect Access Control (issue 1 of 3). A spammer can use Special:ChangeEmail to send out spam with no rate limiting or ability to block them. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.	CVE-2019-12467 GHSA-6vfg-8ppv-h5hg
VCID-4q2b-jwqb-aaas	Wikimedia MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed log in RevisionDelete page is exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.	CVE-2019-12470 GHSA-733q-m38x-q7cc
VCID-8ex1-6xse-aaab	MediaWiki through 1.33.1 allows attackers to bypass the Title_blacklist protection mechanism by starting with an arbitrary title, establishing a non-resolvable redirect for the associated page, and using redirect=1 in the action API when editing that page.	CVE-2019-19709 GHSA-pjv5-vv93-p648
VCID-9xdp-s1sy-aaaq	Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains an information disclosure flaw in the Special:Redirect/logid	CVE-2018-0504 GHSA-hr8v-f4g2-p66f
VCID-aap7-715h-aaab	An Incorrect Access Control vulnerability was found in Wikimedia MediaWiki 1.18.0 through 1.32.1. It is possible to bypass the limits on IP range blocks ($wgBlockCIDRLimit) by using the API. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.	CVE-2019-12472 GHSA-7mqg-5fgh-xh4r
VCID-azqw-d7r1-aaad	Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where contrary to the documentation, $wgRateLimits entry for 'user' overrides that for 'newbie'.	CVE-2018-0503 GHSA-mhfv-9h99-jwg7
VCID-bhgn-gct9-aaae	Wikimedia MediaWiki through 1.32.1 allows CSRF.	CVE-2019-12466 GHSA-27fw-r78j-h898
VCID-f9ks-vah3-aaaa	Wikimedia MediaWiki 1.23.0 through 1.32.1 has an information leak. Privileged API responses that include whether a recent change has been patrolled may be cached publicly. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.	CVE-2019-12474 GHSA-2qrr-c2gh-pr35
VCID-fe1a-1s8p-aaaf	In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup.	CVE-2019-16738 GHSA-7hwr-f745-5rwq
VCID-fwhc-xtwd-aaag	MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed username or log in Special:EditTags are exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.	CVE-2019-12469 GHSA-x3fr-w7r5-x7rg
VCID-gd5c-rvxf-aaam	MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows remote attackers to inject > (greater than) characters via the id attribute of a headline.	CVE-2017-8812
VCID-gh8f-mrk4-aaar	MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2, when a private wiki is configured, provides different error messages for failed login attempts depending on whether the username exists, which allows remote attackers to enumerate account names and conduct brute-force attacks via a series of requests.	CVE-2017-8810
VCID-mbfm-pxzx-aaaa	The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attribute injection attacks via glossary rules.	CVE-2017-8815
VCID-qynw-xq2t-aaap	An Incorrect Access Control vulnerability was found in Wikimedia MediaWiki 1.27.0 through 1.32.1. Directly POSTing to Special:ChangeEmail would allow for bypassing re-authentication, allowing for potential account takeover.	CVE-2019-12468 GHSA-wrhx-3pxr-6vgg
VCID-r4f3-hm1w-aaap	MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has XSS when the $wgShowExceptionDetails setting is false and the browser sends non-standard URL escaping.	CVE-2017-8808
VCID-sa8w-pzne-aaas	Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where BotPasswords can bypass CentralAuth's account lock	CVE-2018-0505 GHSA-5c6w-f4w2-2grp
VCID-tm36-42qs-aaah	Wikimedia MediaWiki 1.30.0 through 1.32.1 has XSS. Loading user JavaScript from a non-existent account allows anyone to create the account, and perform XSS on users loading that script. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.	CVE-2019-12471 GHSA-2rm7-xxx8-35jh
VCID-tv97-anfg-aaam	jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.	CVE-2019-11358 GHSA-6c3j-c64m-qhgq
VCID-uuyp-pj3y-aaac	The implementation of raw message parameter expansion in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows HTML mangling attacks.	CVE-2017-8811
VCID-w1e2-vvzz-aaam	The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attackers to replace text inside tags via a rule definition followed by "a lot of junk."	CVE-2017-8814
VCID-xfq2-pqeb-aaah	api.php in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has a Reflected File Download vulnerability.	CVE-2017-8809
VCID-zqf1-jg5k-aaap	Wikimedia MediaWiki 1.27.0 through 1.32.1 might allow DoS. Passing invalid titles to the API could cause a DoS by querying the entire watchlist table. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.	CVE-2019-12473 GHSA-33xw-x3pr-rvqj

Vulnerability

Summary

Aliases

VCID-2txe-5685-aaar

CVE-2019-12467
GHSA-6vfg-8ppv-h5hg

VCID-4q2b-jwqb-aaas

Wikimedia MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed log in RevisionDelete page is exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.

CVE-2019-12470
GHSA-733q-m38x-q7cc

VCID-8ex1-6xse-aaab

CVE-2019-19709
GHSA-pjv5-vv93-p648

VCID-9xdp-s1sy-aaaq

Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains an information disclosure flaw in the Special:Redirect/logid

CVE-2018-0504
GHSA-hr8v-f4g2-p66f

VCID-aap7-715h-aaab

CVE-2019-12472
GHSA-7mqg-5fgh-xh4r

VCID-azqw-d7r1-aaad

Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where contrary to the documentation, $wgRateLimits entry for 'user' overrides that for 'newbie'.

CVE-2018-0503
GHSA-mhfv-9h99-jwg7

VCID-bhgn-gct9-aaae

Wikimedia MediaWiki through 1.32.1 allows CSRF.

CVE-2019-12466
GHSA-27fw-r78j-h898

VCID-f9ks-vah3-aaaa

CVE-2019-12474
GHSA-2qrr-c2gh-pr35

VCID-fe1a-1s8p-aaaf

In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup.

CVE-2019-16738
GHSA-7hwr-f745-5rwq

VCID-fwhc-xtwd-aaag

MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed username or log in Special:EditTags are exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.

CVE-2019-12469
GHSA-x3fr-w7r5-x7rg

VCID-gd5c-rvxf-aaam

MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows remote attackers to inject > (greater than) characters via the id attribute of a headline.

CVE-2017-8812

VCID-gh8f-mrk4-aaar

MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2, when a private wiki is configured, provides different error messages for failed login attempts depending on whether the username exists, which allows remote attackers to enumerate account names and conduct brute-force attacks via a series of requests.

CVE-2017-8810

VCID-mbfm-pxzx-aaaa

The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attribute injection attacks via glossary rules.

CVE-2017-8815

VCID-qynw-xq2t-aaap

CVE-2019-12468
GHSA-wrhx-3pxr-6vgg

VCID-r4f3-hm1w-aaap

MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has XSS when the $wgShowExceptionDetails setting is false and the browser sends non-standard URL escaping.

CVE-2017-8808

VCID-sa8w-pzne-aaas

Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where BotPasswords can bypass CentralAuth's account lock

CVE-2018-0505
GHSA-5c6w-f4w2-2grp

VCID-tm36-42qs-aaah

CVE-2019-12471
GHSA-2rm7-xxx8-35jh

VCID-tv97-anfg-aaam

CVE-2019-11358
GHSA-6c3j-c64m-qhgq

VCID-uuyp-pj3y-aaac

The implementation of raw message parameter expansion in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows HTML mangling attacks.

CVE-2017-8811

VCID-w1e2-vvzz-aaam

The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attackers to replace text inside tags via a rule definition followed by "a lot of junk."

CVE-2017-8814

VCID-xfq2-pqeb-aaah

api.php in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has a Reflected File Download vulnerability.

CVE-2017-8809

VCID-zqf1-jg5k-aaap

Wikimedia MediaWiki 1.27.0 through 1.32.1 might allow DoS. Passing invalid titles to the API could cause a DoS by querying the entire watchlist table. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.

CVE-2019-12473
GHSA-33xw-x3pr-rvqj

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2025-06-22T15:27:45.421928+00:00	Debian Importer	Affected by	VCID-1ut1-kx68-aaab	None	36.1.3
2025-06-21T19:19:25.891117+00:00	Debian Oval Importer	Affected by	VCID-f89j-dkdk-aaah	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.3
2025-06-21T19:18:08.620858+00:00	Debian Oval Importer	Affected by	VCID-bhgn-gct9-aaae	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.3
2025-06-21T19:17:29.647417+00:00	Debian Oval Importer	Affected by	VCID-4q2b-jwqb-aaas	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.3
2025-06-21T19:14:26.004521+00:00	Debian Oval Importer	Affected by	VCID-7kgb-jke8-aaan	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.3
2025-06-21T19:13:54.126912+00:00	Debian Oval Importer	Affected by	VCID-fwhc-xtwd-aaag	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.3
2025-06-21T19:11:14.729719+00:00	Debian Oval Importer	Affected by	VCID-tv97-anfg-aaam	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.3
2025-06-21T19:10:31.687234+00:00	Debian Oval Importer	Affected by	VCID-3wvj-4a66-aaaq	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.3
2025-06-21T19:10:17.105484+00:00	Debian Oval Importer	Affected by	VCID-k3vw-m137-aaan	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.3
2025-06-21T19:04:04.176779+00:00	Debian Oval Importer	Affected by	VCID-tr2g-xya5-aaaj	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.3
2025-06-21T19:02:43.286229+00:00	Debian Oval Importer	Affected by	VCID-m8vg-2sz1-aaas	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.3
2025-06-21T19:02:39.882983+00:00	Debian Oval Importer	Fixing	VCID-gd5c-rvxf-aaam	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.3
2025-06-21T19:01:19.637162+00:00	Debian Oval Importer	Affected by	VCID-urwg-y5xz-aaag	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.3
2025-06-21T18:58:26.770472+00:00	Debian Oval Importer	Affected by	VCID-aus1-t1px-aaar	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.3
2025-06-21T18:57:27.098043+00:00	Debian Oval Importer	Affected by	VCID-sa8w-pzne-aaas	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.3
2025-06-21T18:48:51.958240+00:00	Debian Oval Importer	Affected by	VCID-qynw-xq2t-aaap	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.3
2025-06-21T18:46:54.509594+00:00	Debian Oval Importer	Affected by	VCID-y6ym-xe1c-aaaq	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.3
2025-06-21T18:45:32.178103+00:00	Debian Oval Importer	Affected by	VCID-7ufk-791q-aaae	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.3
2025-06-21T18:44:20.724102+00:00	Debian Oval Importer	Affected by	VCID-f9ks-vah3-aaaa	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.3
2025-06-21T18:38:09.808894+00:00	Debian Oval Importer	Affected by	VCID-hphf-74rm-aaaa	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.3
2025-06-21T18:34:44.149799+00:00	Debian Oval Importer	Affected by	VCID-at1z-tdh1-aaan	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.3
2025-06-21T18:32:20.500870+00:00	Debian Oval Importer	Affected by	VCID-ycgv-unnm-aaag	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.3
2025-06-21T18:27:56.797356+00:00	Debian Oval Importer	Affected by	VCID-9xdp-s1sy-aaaq	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.3
2025-06-21T18:18:50.347372+00:00	Debian Oval Importer	Affected by	VCID-1ut1-kx68-aaab	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.3
2025-06-21T18:09:45.746511+00:00	Debian Oval Importer	Affected by	VCID-qhwj-913t-aaan	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.3
2025-06-21T18:08:03.142227+00:00	Debian Oval Importer	Affected by	VCID-keup-3kbx-aaaj	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.3
2025-06-21T17:58:49.646134+00:00	Debian Oval Importer	Affected by	VCID-hphf-74rm-aaaa	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T17:43:51.173511+00:00	Debian Oval Importer	Affected by	VCID-4q2b-jwqb-aaas	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T17:26:50.290457+00:00	Debian Oval Importer	Affected by	VCID-ydzn-t292-aaad	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T17:24:05.013045+00:00	Debian Oval Importer	Affected by	VCID-aus1-t1px-aaar	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T17:04:19.362997+00:00	Debian Oval Importer	Affected by	VCID-tr2g-xya5-aaaj	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T16:36:55.188084+00:00	Debian Oval Importer	Affected by	VCID-zh8q-p26k-aaas	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T16:36:54.477137+00:00	Debian Oval Importer	Affected by	VCID-2e4k-6z9d-aaab	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T16:31:51.450454+00:00	Debian Oval Importer	Affected by	VCID-urwg-y5xz-aaag	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T16:16:12.297225+00:00	Debian Oval Importer	Affected by	VCID-8ex1-6xse-aaab	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T16:16:05.133947+00:00	Debian Oval Importer	Affected by	VCID-38ac-xq25-aaaq	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T16:02:53.593720+00:00	Debian Oval Importer	Affected by	VCID-qynw-xq2t-aaap	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T15:54:36.661495+00:00	Debian Oval Importer	Affected by	VCID-hgcw-v93v-aaad	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T15:53:23.887058+00:00	Debian Oval Importer	Fixing	VCID-gh8f-mrk4-aaar	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T15:39:07.831911+00:00	Debian Oval Importer	Affected by	VCID-2txe-5685-aaar	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T15:33:55.522917+00:00	Debian Oval Importer	Affected by	VCID-y6ym-xe1c-aaaq	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T15:30:18.334241+00:00	Debian Oval Importer	Fixing	VCID-mbfm-pxzx-aaaa	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T15:25:02.895720+00:00	Debian Oval Importer	Affected by	VCID-n724-h9bq-aaak	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T15:01:37.751437+00:00	Debian Oval Importer	Affected by	VCID-fwhc-xtwd-aaag	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T15:01:02.241473+00:00	Debian Oval Importer	Affected by	VCID-1pw8-kzjs-aaah	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T14:41:53.306428+00:00	Debian Oval Importer	Affected by	VCID-y687-awyz-aaag	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T14:40:19.491917+00:00	Debian Oval Importer	Fixing	VCID-gd5c-rvxf-aaam	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T14:38:50.517988+00:00	Debian Oval Importer	Affected by	VCID-zyhx-9g42-aaae	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T14:33:45.213554+00:00	Debian Oval Importer	Affected by	VCID-tv97-anfg-aaam	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T14:31:55.292215+00:00	Debian Oval Importer	Affected by	VCID-f89j-dkdk-aaah	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T14:30:32.667505+00:00	Debian Oval Importer	Affected by	VCID-bp3f-tajm-aaaf	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T14:27:22.770872+00:00	Debian Oval Importer	Affected by	VCID-gbqb-um5f-aaac	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T14:19:40.002345+00:00	Debian Oval Importer	Affected by	VCID-9xdp-s1sy-aaaq	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T14:15:26.358426+00:00	Debian Oval Importer	Affected by	VCID-at1z-tdh1-aaan	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T14:06:59.364263+00:00	Debian Oval Importer	Affected by	VCID-fe1a-1s8p-aaaf	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T14:02:54.045127+00:00	Debian Oval Importer	Affected by	VCID-bhgn-gct9-aaae	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T13:57:18.044040+00:00	Debian Oval Importer	Affected by	VCID-1ut1-kx68-aaab	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T13:52:38.631170+00:00	Debian Oval Importer	Affected by	VCID-azqw-d7r1-aaad	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T13:42:45.686011+00:00	Debian Oval Importer	Affected by	VCID-dhd7-4u65-aaaa	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T13:41:43.307813+00:00	Debian Oval Importer	Fixing	VCID-r4f3-hm1w-aaap	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T13:41:28.748166+00:00	Debian Oval Importer	Affected by	VCID-xb7m-ngk2-aaae	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T13:34:55.240911+00:00	Debian Oval Importer	Affected by	VCID-aap7-715h-aaab	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T13:34:17.456143+00:00	Debian Oval Importer	Affected by	VCID-faaf-e9j7-aaac	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T13:14:15.368342+00:00	Debian Oval Importer	Affected by	VCID-uy1p-tvx3-aaah	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T13:12:39.250172+00:00	Debian Oval Importer	Affected by	VCID-ah5y-k5sb-aaap	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T13:05:39.837146+00:00	Debian Oval Importer	Affected by	VCID-mj69-gx7y-aaah	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T13:02:49.507053+00:00	Debian Oval Importer	Affected by	VCID-p4de-8vmj-aaah	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T13:02:27.918470+00:00	Debian Oval Importer	Affected by	VCID-3f62-6xn7-aaab	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T13:01:03.231589+00:00	Debian Oval Importer	Affected by	VCID-9cq6-c3xb-aaam	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T12:55:26.611079+00:00	Debian Oval Importer	Fixing	VCID-xfq2-pqeb-aaah	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T12:53:39.296795+00:00	Debian Oval Importer	Affected by	VCID-3tye-xqmf-aaaa	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T12:36:17.776370+00:00	Debian Oval Importer	Fixing	VCID-w1e2-vvzz-aaam	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T12:33:12.212093+00:00	Debian Oval Importer	Affected by	VCID-f9ks-vah3-aaaa	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T12:32:33.944580+00:00	Debian Oval Importer	Affected by	VCID-g6qq-mucg-aaar	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T12:30:23.682818+00:00	Debian Oval Importer	Fixing	VCID-uuyp-pj3y-aaac	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T12:19:36.742137+00:00	Debian Oval Importer	Affected by	VCID-tm36-42qs-aaah	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T12:04:43.995597+00:00	Debian Oval Importer	Affected by	VCID-zqf1-jg5k-aaap	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T12:02:42.703148+00:00	Debian Oval Importer	Affected by	VCID-k3vw-m137-aaan	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T11:48:33.657645+00:00	Debian Oval Importer	Affected by	VCID-fbrx-yzny-aaae	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T11:44:07.616576+00:00	Debian Oval Importer	Affected by	VCID-jwgf-c1pr-aaan	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T11:40:59.730398+00:00	Debian Oval Importer	Affected by	VCID-59gg-vg2h-aaae	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T11:36:39.721948+00:00	Debian Oval Importer	Affected by	VCID-sa8w-pzne-aaas	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T11:36:31.666364+00:00	Debian Oval Importer	Affected by	VCID-egth-zjt7-aaab	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T11:33:55.896129+00:00	Debian Oval Importer	Affected by	VCID-b5eq-97nn-aaah	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T11:30:21.940652+00:00	Debian Oval Importer	Affected by	VCID-keup-3kbx-aaaj	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T11:18:53.105078+00:00	Debian Oval Importer	Affected by	VCID-k1m8-1qs1-aaab	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T11:18:26.536167+00:00	Debian Oval Importer	Affected by	VCID-7kgb-jke8-aaan	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T11:11:50.458119+00:00	Debian Oval Importer	Affected by	VCID-9u66-uk51-aaak	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.3
2025-06-21T11:05:19.811274+00:00	Debian Oval Importer	Fixing	VCID-fwhc-xtwd-aaag	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.3
2025-06-21T10:59:53.572662+00:00	Debian Oval Importer	Fixing	VCID-tv97-anfg-aaam	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.3
2025-06-21T10:59:35.777709+00:00	Debian Oval Importer	Fixing	VCID-9xdp-s1sy-aaaq	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.3
2025-06-21T10:57:59.195636+00:00	Debian Oval Importer	Fixing	VCID-gd5c-rvxf-aaam	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.3
2025-06-21T10:52:34.751520+00:00	Debian Oval Importer	Fixing	VCID-zqf1-jg5k-aaap	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.3
2025-06-21T10:50:59.541485+00:00	Debian Oval Importer	Fixing	VCID-tm36-42qs-aaah	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.3
2025-06-21T10:49:28.135492+00:00	Debian Oval Importer	Fixing	VCID-mbfm-pxzx-aaaa	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.3
2025-06-21T10:43:00.572288+00:00	Debian Oval Importer	Fixing	VCID-8ex1-6xse-aaab	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.3
2025-06-21T10:32:49.319188+00:00	Debian Oval Importer	Fixing	VCID-fe1a-1s8p-aaaf	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.3
2025-06-21T10:31:13.208420+00:00	Debian Oval Importer	Fixing	VCID-aap7-715h-aaab	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.3
2025-06-21T10:29:00.357544+00:00	Debian Oval Importer	Fixing	VCID-4q2b-jwqb-aaas	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.3
2025-06-21T10:26:13.634756+00:00	Debian Oval Importer	Fixing	VCID-f9ks-vah3-aaaa	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.3
2025-06-21T10:25:11.214189+00:00	Debian Oval Importer	Fixing	VCID-sa8w-pzne-aaas	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.3
2025-06-21T10:24:34.863091+00:00	Debian Oval Importer	Fixing	VCID-r4f3-hm1w-aaap	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.3
2025-06-21T10:24:01.806953+00:00	Debian Oval Importer	Fixing	VCID-uuyp-pj3y-aaac	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.3
2025-06-21T10:23:55.087571+00:00	Debian Oval Importer	Fixing	VCID-bhgn-gct9-aaae	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.3
2025-06-21T10:23:16.548520+00:00	Debian Oval Importer	Fixing	VCID-qynw-xq2t-aaap	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.3
2025-06-21T10:19:57.779072+00:00	Debian Oval Importer	Fixing	VCID-xfq2-pqeb-aaah	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.3
2025-06-21T10:18:51.240682+00:00	Debian Oval Importer	Fixing	VCID-w1e2-vvzz-aaam	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.3
2025-06-21T10:18:09.797304+00:00	Debian Oval Importer	Fixing	VCID-gh8f-mrk4-aaar	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.3
2025-06-21T10:14:32.251635+00:00	Debian Oval Importer	Fixing	VCID-azqw-d7r1-aaad	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.3
2025-06-21T10:13:27.669179+00:00	Debian Oval Importer	Fixing	VCID-2txe-5685-aaar	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.3
2025-06-21T08:30:29.040116+00:00	Debian Oval Importer	Affected by	VCID-prsw-emhu-aaaf	None	36.1.3
2025-06-21T08:30:28.329162+00:00	Debian Oval Importer	Affected by	VCID-t8e4-5s1r-aaar	None	36.1.3
2025-06-21T08:30:27.651944+00:00	Debian Oval Importer	Affected by	VCID-akm6-w59h-aaak	None	36.1.3
2025-06-21T08:30:26.966944+00:00	Debian Oval Importer	Affected by	VCID-2e4k-6z9d-aaab	None	36.1.3
2025-06-21T08:30:26.146365+00:00	Debian Oval Importer	Affected by	VCID-59gg-vg2h-aaae	None	36.1.3
2025-06-21T06:18:42.852463+00:00	Debian Oval Importer	Affected by	VCID-qhwj-913t-aaan	None	36.1.3
2025-06-21T06:18:01.431991+00:00	Debian Oval Importer	Affected by	VCID-6bag-p9re-aaaf	None	36.1.3
2025-06-21T05:43:26.966798+00:00	Debian Oval Importer	Affected by	VCID-qy5g-zjex-aaan	None	36.1.3
2025-06-21T05:14:34.476995+00:00	Debian Oval Importer	Affected by	VCID-7ycs-sa7m-aaar	None	36.1.3
2025-06-21T05:04:21.189845+00:00	Debian Oval Importer	Affected by	VCID-ru64-mr55-aaab	None	36.1.3
2025-06-21T05:00:23.837409+00:00	Debian Oval Importer	Affected by	VCID-7jf3-227f-aaas	None	36.1.3
2025-06-21T04:28:51.222756+00:00	Debian Oval Importer	Affected by	VCID-7ufk-791q-aaae	None	36.1.3
2025-06-21T04:04:00.080090+00:00	Debian Oval Importer	Affected by	VCID-3bm7-tmfe-aaar	None	36.1.3
2025-06-21T03:01:41.586987+00:00	Debian Oval Importer	Affected by	VCID-ycgv-unnm-aaag	None	36.1.3
2025-06-21T02:05:59.119310+00:00	Debian Oval Importer	Affected by	VCID-3wvj-4a66-aaaq	None	36.1.3
2025-06-21T01:55:39.098404+00:00	Debian Oval Importer	Affected by	VCID-m8vg-2sz1-aaas	None	36.1.3
2025-06-21T01:55:26.695314+00:00	Debian Oval Importer	Affected by	VCID-pb6q-3j39-aaaf	None	36.1.3
2025-06-21T01:46:41.400042+00:00	Debian Oval Importer	Affected by	VCID-a3hy-ceqf-aaaq	None	36.1.3
2025-06-21T01:21:04.647760+00:00	Debian Oval Importer	Affected by	VCID-y6ym-xe1c-aaaq	None	36.1.3
2025-06-21T01:19:41.165808+00:00	Debian Oval Importer	Affected by	VCID-gbqb-um5f-aaac	None	36.1.3
2025-06-21T01:19:26.942844+00:00	Debian Oval Importer	Affected by	VCID-k1m8-1qs1-aaab	None	36.1.3
2025-06-21T01:10:06.287616+00:00	Debian Oval Importer	Affected by	VCID-zqf1-jg5k-aaap	None	36.1.3
2025-06-21T01:06:44.038502+00:00	Debian Oval Importer	Affected by	VCID-f89j-dkdk-aaah	None	36.1.3
2025-06-21T00:57:02.763723+00:00	Debian Oval Importer	Affected by	VCID-38ac-xq25-aaaq	None	36.1.3
2025-06-21T00:53:25.012802+00:00	Debian Oval Importer	Affected by	VCID-mj69-gx7y-aaah	None	36.1.3
2025-06-21T00:50:48.836747+00:00	Debian Oval Importer	Affected by	VCID-aap7-715h-aaab	None	36.1.3
2025-06-21T00:43:06.537544+00:00	Debian Oval Importer	Affected by	VCID-egth-zjt7-aaab	None	36.1.3
2025-06-21T00:41:09.297799+00:00	Debian Oval Importer	Affected by	VCID-4q2b-jwqb-aaas	None	36.1.3
2025-06-21T00:40:50.590360+00:00	Debian Oval Importer	Affected by	VCID-tv97-anfg-aaam	None	36.1.3
2025-06-21T00:39:29.334435+00:00	Debian Oval Importer	Affected by	VCID-bhgn-gct9-aaae	None	36.1.3
2025-06-21T00:35:37.605710+00:00	Debian Oval Importer	Fixing	VCID-w1e2-vvzz-aaam	None	36.1.3
2025-06-21T00:33:10.937914+00:00	Debian Oval Importer	Affected by	VCID-fwhc-xtwd-aaag	None	36.1.3
2025-06-21T00:32:45.844034+00:00	Debian Oval Importer	Fixing	VCID-gd5c-rvxf-aaam	None	36.1.3
2025-06-21T00:24:55.407631+00:00	Debian Oval Importer	Affected by	VCID-fe1a-1s8p-aaaf	None	36.1.3
2025-06-21T00:17:12.890231+00:00	Debian Oval Importer	Affected by	VCID-faaf-e9j7-aaac	None	36.1.3
2025-06-21T00:15:09.926147+00:00	Debian Oval Importer	Affected by	VCID-g6qq-mucg-aaar	None	36.1.3
2025-06-20T23:53:09.876202+00:00	Debian Oval Importer	Affected by	VCID-tr2g-xya5-aaaj	None	36.1.3
2025-06-20T23:52:35.480659+00:00	Debian Oval Importer	Affected by	VCID-jwgf-c1pr-aaan	None	36.1.3
2025-06-20T23:52:01.206979+00:00	Debian Oval Importer	Affected by	VCID-b5eq-97nn-aaah	None	36.1.3
2025-06-20T23:51:42.619955+00:00	Debian Oval Importer	Affected by	VCID-zyhx-9g42-aaae	None	36.1.3
2025-06-20T23:30:14.616925+00:00	Debian Oval Importer	Affected by	VCID-xb7m-ngk2-aaae	None	36.1.3
2025-06-20T23:22:33.135152+00:00	Debian Oval Importer	Affected by	VCID-ah5y-k5sb-aaap	None	36.1.3
2025-06-20T23:19:59.737821+00:00	Debian Oval Importer	Affected by	VCID-sa8w-pzne-aaas	None	36.1.3
2025-06-20T23:07:43.649650+00:00	Debian Oval Importer	Affected by	VCID-bp3f-tajm-aaaf	None	36.1.3
2025-06-20T23:06:15.532253+00:00	Debian Oval Importer	Affected by	VCID-tm36-42qs-aaah	None	36.1.3
2025-06-20T23:02:33.725999+00:00	Debian Oval Importer	Affected by	VCID-zh8q-p26k-aaas	None	36.1.3
2025-06-20T22:50:50.539326+00:00	Debian Oval Importer	Fixing	VCID-gh8f-mrk4-aaar	None	36.1.3
2025-06-20T22:43:13.810196+00:00	Debian Oval Importer	Affected by	VCID-p4de-8vmj-aaah	None	36.1.3
2025-06-20T22:36:46.500468+00:00	Debian Oval Importer	Affected by	VCID-9u66-uk51-aaak	None	36.1.3
2025-06-20T22:25:54.916514+00:00	Debian Oval Importer	Affected by	VCID-hphf-74rm-aaaa	None	36.1.3
2025-06-20T22:22:38.658571+00:00	Debian Oval Importer	Affected by	VCID-8ex1-6xse-aaab	None	36.1.3
2025-06-20T22:16:12.320420+00:00	Debian Oval Importer	Affected by	VCID-2txe-5685-aaar	None	36.1.3
2025-06-20T22:13:12.354424+00:00	Debian Oval Importer	Affected by	VCID-3tye-xqmf-aaaa	None	36.1.3
2025-06-20T22:11:49.584197+00:00	Debian Oval Importer	Affected by	VCID-y687-awyz-aaag	None	36.1.3
2025-06-20T22:10:51.339020+00:00	Debian Oval Importer	Fixing	VCID-xfq2-pqeb-aaah	None	36.1.3
2025-06-20T22:06:57.344752+00:00	Debian Oval Importer	Affected by	VCID-fbrx-yzny-aaae	None	36.1.3
2025-06-20T22:02:20.459174+00:00	Debian Oval Importer	Affected by	VCID-keup-3kbx-aaaj	None	36.1.3
2025-06-20T21:57:09.332022+00:00	Debian Oval Importer	Affected by	VCID-9xdp-s1sy-aaaq	None	36.1.3
2025-06-20T21:53:24.707660+00:00	Debian Oval Importer	Affected by	VCID-f9ks-vah3-aaaa	None	36.1.3
2025-06-20T21:49:21.125168+00:00	Debian Oval Importer	Fixing	VCID-mbfm-pxzx-aaaa	None	36.1.3
2025-06-20T21:48:02.266951+00:00	Debian Oval Importer	Affected by	VCID-qynw-xq2t-aaap	None	36.1.3
2025-06-20T21:40:38.420510+00:00	Debian Oval Importer	Affected by	VCID-7kgb-jke8-aaan	None	36.1.3
2025-06-20T21:31:26.254410+00:00	Debian Oval Importer	Fixing	VCID-uuyp-pj3y-aaac	None	36.1.3
2025-06-20T21:31:21.568176+00:00	Debian Oval Importer	Affected by	VCID-n724-h9bq-aaak	None	36.1.3
2025-06-20T21:27:42.138524+00:00	Debian Oval Importer	Affected by	VCID-3f62-6xn7-aaab	None	36.1.3
2025-06-20T21:23:38.613610+00:00	Debian Oval Importer	Affected by	VCID-hgcw-v93v-aaad	None	36.1.3
2025-06-20T21:22:09.168394+00:00	Debian Oval Importer	Affected by	VCID-uy1p-tvx3-aaah	None	36.1.3
2025-06-20T21:10:23.565284+00:00	Debian Oval Importer	Affected by	VCID-dhd7-4u65-aaaa	None	36.1.3
2025-06-20T21:07:06.871344+00:00	Debian Oval Importer	Affected by	VCID-zbqw-eg13-aaam	None	36.1.3
2025-06-20T21:02:41.520915+00:00	Debian Oval Importer	Affected by	VCID-1pw8-kzjs-aaah	None	36.1.3
2025-06-20T20:55:34.507192+00:00	Debian Oval Importer	Affected by	VCID-1ut1-kx68-aaab	None	36.1.3
2025-06-20T20:39:52.449454+00:00	Debian Oval Importer	Affected by	VCID-azqw-d7r1-aaad	None	36.1.3
2025-06-20T20:37:54.848993+00:00	Debian Oval Importer	Affected by	VCID-k3vw-m137-aaan	None	36.1.3
2025-06-20T20:16:29.349857+00:00	Debian Oval Importer	Affected by	VCID-ydzn-t292-aaad	None	36.1.3
2025-06-20T20:16:27.175908+00:00	Debian Oval Importer	Affected by	VCID-9cq6-c3xb-aaam	None	36.1.3
2025-06-20T20:06:12.318381+00:00	Debian Oval Importer	Fixing	VCID-fe1a-1s8p-aaaf	None	36.1.3
2025-06-20T20:01:06.083967+00:00	Debian Oval Importer	Fixing	VCID-r4f3-hm1w-aaap	None	36.1.3
2025-06-20T20:00:53.970299+00:00	Debian Oval Importer	Fixing	VCID-tv97-anfg-aaam	None	36.1.3
2025-06-20T19:57:14.831270+00:00	Debian Oval Importer	Fixing	VCID-8ex1-6xse-aaab	None	36.1.3
2025-06-20T19:55:19.703890+00:00	Debian Oval Importer	Fixing	VCID-azqw-d7r1-aaad	None	36.1.3
2025-06-08T13:19:35.117024+00:00	Debian Oval Importer	Affected by	VCID-qb3k-17vr-aaab	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T13:15:30.730730+00:00	Debian Oval Importer	Affected by	VCID-qy5g-zjex-aaan	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T13:06:06.448616+00:00	Debian Oval Importer	Affected by	VCID-b5eq-97nn-aaah	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T12:58:40.543034+00:00	Debian Oval Importer	Affected by	VCID-8ex1-6xse-aaab	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T12:54:54.169524+00:00	Debian Oval Importer	Affected by	VCID-prsw-emhu-aaaf	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T12:49:31.878846+00:00	Debian Oval Importer	Affected by	VCID-9cq6-c3xb-aaam	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T12:48:54.825969+00:00	Debian Oval Importer	Affected by	VCID-aap7-715h-aaab	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T12:42:13.250427+00:00	Debian Oval Importer	Affected by	VCID-zqf1-jg5k-aaap	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T12:38:45.689038+00:00	Debian Oval Importer	Fixing	VCID-mbfm-pxzx-aaaa	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T12:35:32.975586+00:00	Debian Oval Importer	Affected by	VCID-gbqb-um5f-aaac	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T12:26:45.336419+00:00	Debian Oval Importer	Affected by	VCID-xb7m-ngk2-aaae	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T12:25:39.090639+00:00	Debian Oval Importer	Affected by	VCID-uy1p-tvx3-aaah	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T12:25:15.383132+00:00	Debian Oval Importer	Affected by	VCID-zbqw-eg13-aaam	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T12:24:16.259680+00:00	Debian Oval Importer	Affected by	VCID-tm36-42qs-aaah	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T12:23:42.729293+00:00	Debian Oval Importer	Fixing	VCID-gh8f-mrk4-aaar	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T12:22:36.325396+00:00	Debian Oval Importer	Affected by	VCID-ydzn-t292-aaad	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T12:16:14.501222+00:00	Debian Oval Importer	Affected by	VCID-38ac-xq25-aaaq	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T12:15:55.243625+00:00	Debian Oval Importer	Affected by	VCID-zh8q-p26k-aaas	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T12:14:53.008759+00:00	Debian Oval Importer	Affected by	VCID-fbrx-yzny-aaae	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T12:12:44.997996+00:00	Debian Oval Importer	Affected by	VCID-faaf-e9j7-aaac	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T12:12:29.240166+00:00	Debian Oval Importer	Fixing	VCID-uuyp-pj3y-aaac	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T12:05:28.265236+00:00	Debian Oval Importer	Affected by	VCID-7jf3-227f-aaas	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T12:01:00.748475+00:00	Debian Oval Importer	Affected by	VCID-pb6q-3j39-aaaf	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T11:59:16.190117+00:00	Debian Oval Importer	Affected by	VCID-59gg-vg2h-aaae	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T11:55:16.216691+00:00	Debian Oval Importer	Affected by	VCID-akm6-w59h-aaak	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T11:48:10.236654+00:00	Debian Oval Importer	Affected by	VCID-f89j-dkdk-aaah	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T11:46:54.926373+00:00	Debian Oval Importer	Affected by	VCID-bhgn-gct9-aaae	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T11:46:17.284456+00:00	Debian Oval Importer	Affected by	VCID-4q2b-jwqb-aaas	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T11:43:13.987150+00:00	Debian Oval Importer	Affected by	VCID-7kgb-jke8-aaan	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T11:42:42.647931+00:00	Debian Oval Importer	Affected by	VCID-fwhc-xtwd-aaag	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T11:40:08.300357+00:00	Debian Oval Importer	Affected by	VCID-tv97-anfg-aaam	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T11:39:26.579393+00:00	Debian Oval Importer	Affected by	VCID-3wvj-4a66-aaaq	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T11:39:12.977921+00:00	Debian Oval Importer	Affected by	VCID-k3vw-m137-aaan	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T11:33:14.986197+00:00	Debian Oval Importer	Affected by	VCID-tr2g-xya5-aaaj	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T11:31:57.053132+00:00	Debian Oval Importer	Affected by	VCID-m8vg-2sz1-aaas	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T11:31:53.655165+00:00	Debian Oval Importer	Fixing	VCID-gd5c-rvxf-aaam	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T11:30:36.681943+00:00	Debian Oval Importer	Affected by	VCID-urwg-y5xz-aaag	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T11:27:49.775211+00:00	Debian Oval Importer	Affected by	VCID-aus1-t1px-aaar	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T11:26:52.992835+00:00	Debian Oval Importer	Affected by	VCID-sa8w-pzne-aaas	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T11:18:43.392857+00:00	Debian Oval Importer	Affected by	VCID-qynw-xq2t-aaap	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T11:16:50.626874+00:00	Debian Oval Importer	Affected by	VCID-y6ym-xe1c-aaaq	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T11:15:30.996933+00:00	Debian Oval Importer	Affected by	VCID-7ufk-791q-aaae	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T11:14:20.939716+00:00	Debian Oval Importer	Affected by	VCID-f9ks-vah3-aaaa	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T11:08:21.213399+00:00	Debian Oval Importer	Affected by	VCID-hphf-74rm-aaaa	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T11:05:08.079425+00:00	Debian Oval Importer	Affected by	VCID-at1z-tdh1-aaan	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T11:02:46.496932+00:00	Debian Oval Importer	Affected by	VCID-ycgv-unnm-aaag	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T10:58:28.758369+00:00	Debian Oval Importer	Affected by	VCID-9xdp-s1sy-aaaq	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T10:49:50.536956+00:00	Debian Oval Importer	Affected by	VCID-1ut1-kx68-aaab	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T10:41:11.144508+00:00	Debian Oval Importer	Affected by	VCID-qhwj-913t-aaan	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T10:39:33.345244+00:00	Debian Oval Importer	Affected by	VCID-keup-3kbx-aaaj	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.1.0
2025-06-08T10:30:32.298485+00:00	Debian Oval Importer	Affected by	VCID-hphf-74rm-aaaa	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T10:16:57.164789+00:00	Debian Oval Importer	Affected by	VCID-4q2b-jwqb-aaas	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T10:05:51.905939+00:00	Debian Oval Importer	Affected by	VCID-ydzn-t292-aaad	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T10:04:27.061839+00:00	Debian Oval Importer	Affected by	VCID-aus1-t1px-aaar	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T09:49:18.518470+00:00	Debian Oval Importer	Affected by	VCID-tr2g-xya5-aaaj	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T09:22:31.644462+00:00	Debian Oval Importer	Affected by	VCID-zh8q-p26k-aaas	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T09:22:30.954856+00:00	Debian Oval Importer	Affected by	VCID-2e4k-6z9d-aaab	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T09:17:39.366494+00:00	Debian Oval Importer	Affected by	VCID-urwg-y5xz-aaag	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T09:02:54.879421+00:00	Debian Oval Importer	Affected by	VCID-8ex1-6xse-aaab	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T09:02:47.616009+00:00	Debian Oval Importer	Affected by	VCID-38ac-xq25-aaaq	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T08:56:08.057653+00:00	Debian Oval Importer	Affected by	VCID-qynw-xq2t-aaap	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T08:47:52.299474+00:00	Debian Oval Importer	Affected by	VCID-hgcw-v93v-aaad	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T08:46:42.210084+00:00	Debian Oval Importer	Fixing	VCID-gh8f-mrk4-aaar	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T08:33:36.026801+00:00	Debian Oval Importer	Affected by	VCID-2txe-5685-aaar	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T08:28:26.032033+00:00	Debian Oval Importer	Affected by	VCID-y6ym-xe1c-aaaq	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T08:24:49.801698+00:00	Debian Oval Importer	Fixing	VCID-mbfm-pxzx-aaaa	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T08:19:36.240072+00:00	Debian Oval Importer	Affected by	VCID-n724-h9bq-aaak	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T07:55:00.681798+00:00	Debian Oval Importer	Affected by	VCID-fwhc-xtwd-aaag	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T07:54:25.294587+00:00	Debian Oval Importer	Affected by	VCID-1pw8-kzjs-aaah	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T07:35:11.118115+00:00	Debian Oval Importer	Affected by	VCID-y687-awyz-aaag	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T07:33:31.684238+00:00	Debian Oval Importer	Fixing	VCID-gd5c-rvxf-aaam	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T07:31:58.963538+00:00	Debian Oval Importer	Affected by	VCID-zyhx-9g42-aaae	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T07:26:47.984876+00:00	Debian Oval Importer	Affected by	VCID-tv97-anfg-aaam	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T07:24:58.429717+00:00	Debian Oval Importer	Affected by	VCID-f89j-dkdk-aaah	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T07:23:32.790827+00:00	Debian Oval Importer	Affected by	VCID-bp3f-tajm-aaaf	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T07:20:23.893182+00:00	Debian Oval Importer	Affected by	VCID-gbqb-um5f-aaac	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T07:12:46.605322+00:00	Debian Oval Importer	Affected by	VCID-9xdp-s1sy-aaaq	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T07:08:47.964866+00:00	Debian Oval Importer	Affected by	VCID-at1z-tdh1-aaan	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T07:00:37.267070+00:00	Debian Oval Importer	Affected by	VCID-fe1a-1s8p-aaaf	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T06:56:55.270708+00:00	Debian Oval Importer	Affected by	VCID-bhgn-gct9-aaae	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T06:51:27.630977+00:00	Debian Oval Importer	Affected by	VCID-1ut1-kx68-aaab	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T06:46:55.581744+00:00	Debian Oval Importer	Affected by	VCID-azqw-d7r1-aaad	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T06:36:58.214343+00:00	Debian Oval Importer	Affected by	VCID-dhd7-4u65-aaaa	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T06:35:58.152212+00:00	Debian Oval Importer	Fixing	VCID-r4f3-hm1w-aaap	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T06:35:44.152272+00:00	Debian Oval Importer	Affected by	VCID-xb7m-ngk2-aaae	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T06:29:02.156714+00:00	Debian Oval Importer	Affected by	VCID-aap7-715h-aaab	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T06:28:20.766491+00:00	Debian Oval Importer	Affected by	VCID-faaf-e9j7-aaac	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T06:08:54.860575+00:00	Debian Oval Importer	Affected by	VCID-uy1p-tvx3-aaah	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T06:07:21.028008+00:00	Debian Oval Importer	Affected by	VCID-ah5y-k5sb-aaap	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T06:00:31.491493+00:00	Debian Oval Importer	Affected by	VCID-mj69-gx7y-aaah	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T05:57:44.339745+00:00	Debian Oval Importer	Affected by	VCID-p4de-8vmj-aaah	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T05:57:23.107336+00:00	Debian Oval Importer	Affected by	VCID-3f62-6xn7-aaab	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T05:55:59.723253+00:00	Debian Oval Importer	Affected by	VCID-9cq6-c3xb-aaam	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T05:50:25.490110+00:00	Debian Oval Importer	Fixing	VCID-xfq2-pqeb-aaah	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T05:48:38.577955+00:00	Debian Oval Importer	Affected by	VCID-3tye-xqmf-aaaa	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T05:33:59.817633+00:00	Debian Oval Importer	Fixing	VCID-w1e2-vvzz-aaam	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T05:31:51.391644+00:00	Debian Oval Importer	Affected by	VCID-f9ks-vah3-aaaa	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T05:31:25.141361+00:00	Debian Oval Importer	Affected by	VCID-g6qq-mucg-aaar	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T05:29:52.790284+00:00	Debian Oval Importer	Fixing	VCID-uuyp-pj3y-aaac	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T05:22:48.840514+00:00	Debian Oval Importer	Affected by	VCID-tm36-42qs-aaah	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T05:12:43.104165+00:00	Debian Oval Importer	Affected by	VCID-zqf1-jg5k-aaap	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T05:11:26.283064+00:00	Debian Oval Importer	Affected by	VCID-k3vw-m137-aaan	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T05:03:00.712941+00:00	Debian Oval Importer	Affected by	VCID-fbrx-yzny-aaae	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T04:59:38.272257+00:00	Debian Oval Importer	Affected by	VCID-jwgf-c1pr-aaan	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T04:57:31.176754+00:00	Debian Oval Importer	Affected by	VCID-59gg-vg2h-aaae	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T04:54:34.536686+00:00	Debian Oval Importer	Affected by	VCID-sa8w-pzne-aaas	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T04:54:28.412805+00:00	Debian Oval Importer	Affected by	VCID-egth-zjt7-aaab	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T04:53:03.235620+00:00	Debian Oval Importer	Affected by	VCID-b5eq-97nn-aaah	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T04:50:45.081790+00:00	Debian Oval Importer	Affected by	VCID-keup-3kbx-aaaj	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T04:42:50.903848+00:00	Debian Oval Importer	Affected by	VCID-k1m8-1qs1-aaab	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T04:42:36.928582+00:00	Debian Oval Importer	Affected by	VCID-7kgb-jke8-aaan	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T04:38:41.159715+00:00	Debian Oval Importer	Affected by	VCID-9u66-uk51-aaak	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.1.0
2025-06-08T04:34:59.589524+00:00	Debian Oval Importer	Fixing	VCID-fwhc-xtwd-aaag	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.0
2025-06-08T04:32:06.293949+00:00	Debian Oval Importer	Fixing	VCID-tv97-anfg-aaam	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.0
2025-06-08T04:31:57.266383+00:00	Debian Oval Importer	Fixing	VCID-9xdp-s1sy-aaaq	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.0
2025-06-08T04:30:56.572089+00:00	Debian Oval Importer	Fixing	VCID-gd5c-rvxf-aaam	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.0
2025-06-08T04:27:18.591885+00:00	Debian Oval Importer	Fixing	VCID-zqf1-jg5k-aaap	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.0
2025-06-08T04:26:32.192795+00:00	Debian Oval Importer	Fixing	VCID-tm36-42qs-aaah	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.0
2025-06-08T04:25:13.577877+00:00	Debian Oval Importer	Fixing	VCID-mbfm-pxzx-aaaa	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.0
2025-06-08T04:21:55.448016+00:00	Debian Oval Importer	Fixing	VCID-8ex1-6xse-aaab	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.0
2025-06-08T04:15:35.172698+00:00	Debian Oval Importer	Fixing	VCID-fe1a-1s8p-aaaf	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.0
2025-06-08T04:14:34.704074+00:00	Debian Oval Importer	Fixing	VCID-aap7-715h-aaab	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.0
2025-06-08T04:13:26.244085+00:00	Debian Oval Importer	Fixing	VCID-4q2b-jwqb-aaas	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.0
2025-06-08T04:11:19.759568+00:00	Debian Oval Importer	Fixing	VCID-f9ks-vah3-aaaa	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.0
2025-06-08T04:10:47.024973+00:00	Debian Oval Importer	Fixing	VCID-sa8w-pzne-aaas	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.0
2025-06-08T04:10:29.284874+00:00	Debian Oval Importer	Fixing	VCID-r4f3-hm1w-aaap	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.0
2025-06-08T04:09:57.009872+00:00	Debian Oval Importer	Fixing	VCID-uuyp-pj3y-aaac	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.0
2025-06-08T04:09:50.449466+00:00	Debian Oval Importer	Fixing	VCID-bhgn-gct9-aaae	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.0
2025-06-08T04:09:17.306822+00:00	Debian Oval Importer	Fixing	VCID-qynw-xq2t-aaap	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.0
2025-06-08T04:07:16.403675+00:00	Debian Oval Importer	Fixing	VCID-xfq2-pqeb-aaah	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.0
2025-06-08T04:06:25.203511+00:00	Debian Oval Importer	Fixing	VCID-w1e2-vvzz-aaam	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.0
2025-06-08T04:05:46.755662+00:00	Debian Oval Importer	Fixing	VCID-gh8f-mrk4-aaar	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.0
2025-06-08T04:03:16.984819+00:00	Debian Oval Importer	Fixing	VCID-azqw-d7r1-aaad	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.0
2025-06-08T04:02:24.405540+00:00	Debian Oval Importer	Fixing	VCID-2txe-5685-aaar	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.1.0
2025-06-08T02:11:57.520827+00:00	Debian Oval Importer	Affected by	VCID-prsw-emhu-aaaf	None	36.1.0
2025-06-08T02:11:56.792690+00:00	Debian Oval Importer	Affected by	VCID-t8e4-5s1r-aaar	None	36.1.0
2025-06-08T02:11:56.012410+00:00	Debian Oval Importer	Affected by	VCID-akm6-w59h-aaak	None	36.1.0
2025-06-08T02:11:55.099531+00:00	Debian Oval Importer	Affected by	VCID-2e4k-6z9d-aaab	None	36.1.0
2025-06-08T02:11:54.400026+00:00	Debian Oval Importer	Affected by	VCID-59gg-vg2h-aaae	None	36.1.0
2025-06-07T23:57:47.763166+00:00	Debian Oval Importer	Affected by	VCID-qhwj-913t-aaan	None	36.1.0
2025-06-07T23:57:05.346212+00:00	Debian Oval Importer	Affected by	VCID-6bag-p9re-aaaf	None	36.1.0
2025-06-07T23:21:42.754616+00:00	Debian Oval Importer	Affected by	VCID-qy5g-zjex-aaan	None	36.1.0
2025-06-07T22:52:05.425849+00:00	Debian Oval Importer	Affected by	VCID-7ycs-sa7m-aaar	None	36.1.0
2025-06-07T22:41:49.074349+00:00	Debian Oval Importer	Affected by	VCID-ru64-mr55-aaab	None	36.1.0
2025-06-07T22:37:48.288256+00:00	Debian Oval Importer	Affected by	VCID-7jf3-227f-aaas	None	36.1.0
2025-06-07T22:05:12.892493+00:00	Debian Oval Importer	Affected by	VCID-7ufk-791q-aaae	None	36.1.0
2025-06-07T21:39:24.923926+00:00	Debian Oval Importer	Affected by	VCID-3bm7-tmfe-aaar	None	36.1.0
2025-06-07T20:31:20.676542+00:00	Debian Oval Importer	Affected by	VCID-ycgv-unnm-aaag	None	36.1.0
2025-06-07T19:29:38.348637+00:00	Debian Oval Importer	Affected by	VCID-3wvj-4a66-aaaq	None	36.1.0
2025-06-07T19:19:05.524473+00:00	Debian Oval Importer	Affected by	VCID-m8vg-2sz1-aaas	None	36.1.0
2025-06-07T19:18:52.579756+00:00	Debian Oval Importer	Affected by	VCID-pb6q-3j39-aaaf	None	36.1.0
2025-06-07T19:09:56.852950+00:00	Debian Oval Importer	Affected by	VCID-a3hy-ceqf-aaaq	None	36.1.0
2025-06-07T18:43:51.946276+00:00	Debian Oval Importer	Affected by	VCID-y6ym-xe1c-aaaq	None	36.1.0
2025-06-07T18:42:27.460208+00:00	Debian Oval Importer	Affected by	VCID-gbqb-um5f-aaac	None	36.1.0
2025-06-07T18:42:13.315760+00:00	Debian Oval Importer	Affected by	VCID-k1m8-1qs1-aaab	None	36.1.0
2025-06-07T18:32:45.895712+00:00	Debian Oval Importer	Affected by	VCID-zqf1-jg5k-aaap	None	36.1.0
2025-06-07T18:29:19.777569+00:00	Debian Oval Importer	Affected by	VCID-f89j-dkdk-aaah	None	36.1.0
2025-06-07T18:19:23.834926+00:00	Debian Oval Importer	Affected by	VCID-38ac-xq25-aaaq	None	36.1.0
2025-06-07T18:15:46.290478+00:00	Debian Oval Importer	Affected by	VCID-mj69-gx7y-aaah	None	36.1.0
2025-06-07T18:13:10.821036+00:00	Debian Oval Importer	Affected by	VCID-aap7-715h-aaab	None	36.1.0
2025-06-07T18:05:40.356035+00:00	Debian Oval Importer	Affected by	VCID-egth-zjt7-aaab	None	36.1.0
2025-06-07T18:03:43.756181+00:00	Debian Oval Importer	Affected by	VCID-4q2b-jwqb-aaas	None	36.1.0
2025-06-07T18:03:25.128563+00:00	Debian Oval Importer	Affected by	VCID-tv97-anfg-aaam	None	36.1.0
2025-06-07T18:02:04.497611+00:00	Debian Oval Importer	Affected by	VCID-bhgn-gct9-aaae	None	36.1.0
2025-06-07T17:58:14.883089+00:00	Debian Oval Importer	Fixing	VCID-w1e2-vvzz-aaam	None	36.1.0
2025-06-07T17:55:49.136091+00:00	Debian Oval Importer	Affected by	VCID-fwhc-xtwd-aaag	None	36.1.0
2025-06-07T17:55:24.308692+00:00	Debian Oval Importer	Fixing	VCID-gd5c-rvxf-aaam	None	36.1.0
2025-06-07T17:47:42.613713+00:00	Debian Oval Importer	Affected by	VCID-fe1a-1s8p-aaaf	None	36.1.0
2025-06-07T17:40:05.957313+00:00	Debian Oval Importer	Affected by	VCID-faaf-e9j7-aaac	None	36.1.0
2025-06-07T17:38:03.156945+00:00	Debian Oval Importer	Affected by	VCID-g6qq-mucg-aaar	None	36.1.0
2025-06-07T17:16:02.279401+00:00	Debian Oval Importer	Affected by	VCID-tr2g-xya5-aaaj	None	36.1.0
2025-06-07T17:15:27.941701+00:00	Debian Oval Importer	Affected by	VCID-jwgf-c1pr-aaan	None	36.1.0
2025-06-07T17:14:52.832363+00:00	Debian Oval Importer	Affected by	VCID-b5eq-97nn-aaah	None	36.1.0
2025-06-07T17:14:34.537964+00:00	Debian Oval Importer	Affected by	VCID-zyhx-9g42-aaae	None	36.1.0
2025-06-07T16:53:09.656616+00:00	Debian Oval Importer	Affected by	VCID-xb7m-ngk2-aaae	None	36.1.0
2025-06-07T16:45:27.375826+00:00	Debian Oval Importer	Affected by	VCID-ah5y-k5sb-aaap	None	36.1.0
2025-06-07T16:42:57.554364+00:00	Debian Oval Importer	Affected by	VCID-sa8w-pzne-aaas	None	36.1.0
2025-06-07T16:30:53.153060+00:00	Debian Oval Importer	Affected by	VCID-bp3f-tajm-aaaf	None	36.1.0
2025-06-07T16:29:26.934836+00:00	Debian Oval Importer	Affected by	VCID-tm36-42qs-aaah	None	36.1.0
2025-06-07T16:25:41.837954+00:00	Debian Oval Importer	Affected by	VCID-zh8q-p26k-aaas	None	36.1.0
2025-06-07T16:14:19.252484+00:00	Debian Oval Importer	Fixing	VCID-gh8f-mrk4-aaar	None	36.1.0
2025-06-07T16:07:07.748360+00:00	Debian Oval Importer	Affected by	VCID-p4de-8vmj-aaah	None	36.1.0
2025-06-07T16:00:45.559987+00:00	Debian Oval Importer	Affected by	VCID-9u66-uk51-aaak	None	36.1.0
2025-06-07T15:50:09.677669+00:00	Debian Oval Importer	Affected by	VCID-hphf-74rm-aaaa	None	36.1.0
2025-06-07T15:46:51.454211+00:00	Debian Oval Importer	Affected by	VCID-8ex1-6xse-aaab	None	36.1.0
2025-06-07T15:40:13.296718+00:00	Debian Oval Importer	Affected by	VCID-2txe-5685-aaar	None	36.1.0
2025-06-07T15:37:12.840077+00:00	Debian Oval Importer	Affected by	VCID-3tye-xqmf-aaaa	None	36.1.0
2025-06-07T15:35:52.016939+00:00	Debian Oval Importer	Affected by	VCID-y687-awyz-aaag	None	36.1.0
2025-06-07T15:34:52.218588+00:00	Debian Oval Importer	Fixing	VCID-xfq2-pqeb-aaah	None	36.1.0
2025-06-07T15:30:52.188090+00:00	Debian Oval Importer	Affected by	VCID-fbrx-yzny-aaae	None	36.1.0
2025-06-07T15:25:58.508768+00:00	Debian Oval Importer	Affected by	VCID-keup-3kbx-aaaj	None	36.1.0
2025-06-07T15:20:36.332925+00:00	Debian Oval Importer	Affected by	VCID-9xdp-s1sy-aaaq	None	36.1.0
2025-06-07T15:16:45.263513+00:00	Debian Oval Importer	Affected by	VCID-f9ks-vah3-aaaa	None	36.1.0
2025-06-07T15:12:27.790198+00:00	Debian Oval Importer	Fixing	VCID-mbfm-pxzx-aaaa	None	36.1.0
2025-06-07T15:11:06.770373+00:00	Debian Oval Importer	Affected by	VCID-qynw-xq2t-aaap	None	36.1.0
2025-06-07T15:03:26.653716+00:00	Debian Oval Importer	Affected by	VCID-7kgb-jke8-aaan	None	36.1.0
2025-06-07T14:53:56.507923+00:00	Debian Oval Importer	Fixing	VCID-uuyp-pj3y-aaac	None	36.1.0
2025-06-07T14:53:51.167194+00:00	Debian Oval Importer	Affected by	VCID-n724-h9bq-aaak	None	36.1.0
2025-06-07T14:50:21.621360+00:00	Debian Oval Importer	Affected by	VCID-3f62-6xn7-aaab	None	36.1.0
2025-06-07T14:46:54.679644+00:00	Debian Oval Importer	Affected by	VCID-hgcw-v93v-aaad	None	36.1.0
2025-06-07T14:45:21.962989+00:00	Debian Oval Importer	Affected by	VCID-uy1p-tvx3-aaah	None	36.1.0
2025-06-07T14:35:26.846564+00:00	Debian Oval Importer	Affected by	VCID-dhd7-4u65-aaaa	None	36.1.0
2025-06-07T14:32:35.478517+00:00	Debian Oval Importer	Affected by	VCID-zbqw-eg13-aaam	None	36.1.0
2025-06-07T14:29:17.776871+00:00	Debian Oval Importer	Affected by	VCID-1pw8-kzjs-aaah	None	36.1.0
2025-06-07T14:23:46.755829+00:00	Debian Oval Importer	Affected by	VCID-1ut1-kx68-aaab	None	36.1.0
2025-06-07T14:11:54.107194+00:00	Debian Oval Importer	Affected by	VCID-azqw-d7r1-aaad	None	36.1.0
2025-06-07T14:10:29.542258+00:00	Debian Oval Importer	Affected by	VCID-k3vw-m137-aaan	None	36.1.0
2025-06-07T13:56:16.116462+00:00	Debian Oval Importer	Affected by	VCID-ydzn-t292-aaad	None	36.1.0
2025-06-07T13:56:14.203708+00:00	Debian Oval Importer	Affected by	VCID-9cq6-c3xb-aaam	None	36.1.0
2025-06-07T13:52:38.723613+00:00	Debian Oval Importer	Fixing	VCID-fe1a-1s8p-aaaf	None	36.1.0
2025-06-07T13:49:58.255211+00:00	Debian Oval Importer	Fixing	VCID-r4f3-hm1w-aaap	None	36.1.0
2025-06-07T13:49:46.447543+00:00	Debian Oval Importer	Fixing	VCID-tv97-anfg-aaam	None	36.1.0
2025-06-07T13:46:57.763617+00:00	Debian Oval Importer	Fixing	VCID-8ex1-6xse-aaab	None	36.1.0
2025-06-07T13:45:35.054453+00:00	Debian Oval Importer	Fixing	VCID-azqw-d7r1-aaad	None	36.1.0
2025-04-13T02:04:36.805252+00:00	Debian Oval Importer	Affected by	VCID-w83q-c41p-aaan	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T23:43:58.602339+00:00	Debian Oval Importer	Affected by	VCID-s1mx-f4zv-aaap	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T23:43:57.883282+00:00	Debian Oval Importer	Affected by	VCID-s1mx-f4zv-aaap	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-12T23:34:41.483886+00:00	Debian Oval Importer	Affected by	VCID-w83q-c41p-aaan	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-12T23:15:21.946916+00:00	Debian Oval Importer	Affected by	VCID-wedv-d1u3-aaaj	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T22:39:11.794537+00:00	Debian Oval Importer	Affected by	VCID-azqw-d7r1-aaad	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T22:12:11.418025+00:00	Debian Oval Importer	Affected by	VCID-y687-awyz-aaag	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T22:05:32.959888+00:00	Debian Oval Importer	Affected by	VCID-jwgf-c1pr-aaan	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T22:02:16.155693+00:00	Debian Oval Importer	Fixing	VCID-xfq2-pqeb-aaah	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T22:02:05.992147+00:00	Debian Oval Importer	Affected by	VCID-zyhx-9g42-aaae	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T21:47:21.435396+00:00	Debian Oval Importer	Affected by	VCID-3tye-xqmf-aaaa	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T21:43:15.442244+00:00	Debian Oval Importer	Affected by	VCID-3bm7-tmfe-aaar	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T21:35:24.970175+00:00	Debian Oval Importer	Affected by	VCID-bp3f-tajm-aaaf	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T21:29:40.557586+00:00	Debian Oval Importer	Affected by	VCID-g6qq-mucg-aaar	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T21:08:22.522090+00:00	Debian Oval Importer	Affected by	VCID-6bag-p9re-aaaf	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T21:07:13.064349+00:00	Debian Oval Importer	Affected by	VCID-ah5y-k5sb-aaap	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T20:57:41.045870+00:00	Debian Oval Importer	Affected by	VCID-mj69-gx7y-aaah	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T20:57:32.669675+00:00	Debian Oval Importer	Affected by	VCID-2e4k-6z9d-aaab	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T20:52:54.077459+00:00	Debian Oval Importer	Affected by	VCID-a3hy-ceqf-aaaq	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T20:49:43.934085+00:00	Debian Oval Importer	Affected by	VCID-1pw8-kzjs-aaah	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T20:48:00.520101+00:00	Debian Oval Importer	Affected by	VCID-9u66-uk51-aaak	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T20:47:23.453716+00:00	Debian Oval Importer	Affected by	VCID-p4de-8vmj-aaah	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T20:47:11.874346+00:00	Debian Oval Importer	Affected by	VCID-7ycs-sa7m-aaar	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T20:26:32.671174+00:00	Debian Oval Importer	Affected by	VCID-hgcw-v93v-aaad	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T20:06:24.237095+00:00	Debian Oval Importer	Affected by	VCID-ru64-mr55-aaab	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T20:00:03.316813+00:00	Debian Oval Importer	Affected by	VCID-fe1a-1s8p-aaaf	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T19:55:41.982374+00:00	Debian Oval Importer	Affected by	VCID-2txe-5685-aaar	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T19:47:48.599539+00:00	Debian Oval Importer	Affected by	VCID-n724-h9bq-aaak	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T19:39:44.759987+00:00	Debian Oval Importer	Affected by	VCID-t8e4-5s1r-aaar	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T19:35:34.129739+00:00	Debian Oval Importer	Affected by	VCID-3f62-6xn7-aaab	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T19:19:15.037711+00:00	Debian Oval Importer	Fixing	VCID-r4f3-hm1w-aaap	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T19:18:04.273430+00:00	Debian Oval Importer	Affected by	VCID-egth-zjt7-aaab	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T19:10:35.027599+00:00	Debian Oval Importer	Fixing	VCID-w1e2-vvzz-aaam	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T19:07:42.255845+00:00	Debian Oval Importer	Affected by	VCID-qb3k-17vr-aaab	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T19:03:26.643423+00:00	Debian Oval Importer	Affected by	VCID-qy5g-zjex-aaan	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T18:53:40.995882+00:00	Debian Oval Importer	Affected by	VCID-b5eq-97nn-aaah	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T18:46:00.166211+00:00	Debian Oval Importer	Affected by	VCID-8ex1-6xse-aaab	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T18:42:05.858356+00:00	Debian Oval Importer	Affected by	VCID-prsw-emhu-aaaf	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T18:36:29.846434+00:00	Debian Oval Importer	Affected by	VCID-9cq6-c3xb-aaam	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T18:35:51.274247+00:00	Debian Oval Importer	Affected by	VCID-aap7-715h-aaab	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T18:29:00.582198+00:00	Debian Oval Importer	Affected by	VCID-zqf1-jg5k-aaap	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T18:25:26.529087+00:00	Debian Oval Importer	Fixing	VCID-mbfm-pxzx-aaaa	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T18:22:04.977989+00:00	Debian Oval Importer	Affected by	VCID-gbqb-um5f-aaac	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T18:12:58.011441+00:00	Debian Oval Importer	Affected by	VCID-xb7m-ngk2-aaae	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T18:11:48.531500+00:00	Debian Oval Importer	Affected by	VCID-uy1p-tvx3-aaah	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T18:11:23.787500+00:00	Debian Oval Importer	Affected by	VCID-zbqw-eg13-aaam	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T18:10:22.181059+00:00	Debian Oval Importer	Affected by	VCID-tm36-42qs-aaah	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T18:09:47.351550+00:00	Debian Oval Importer	Fixing	VCID-gh8f-mrk4-aaar	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T18:08:38.178371+00:00	Debian Oval Importer	Affected by	VCID-ydzn-t292-aaad	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T18:02:00.476675+00:00	Debian Oval Importer	Affected by	VCID-38ac-xq25-aaaq	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T18:01:40.884482+00:00	Debian Oval Importer	Affected by	VCID-zh8q-p26k-aaas	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T18:00:36.962341+00:00	Debian Oval Importer	Affected by	VCID-fbrx-yzny-aaae	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T17:58:26.515517+00:00	Debian Oval Importer	Affected by	VCID-faaf-e9j7-aaac	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T17:58:09.899704+00:00	Debian Oval Importer	Fixing	VCID-uuyp-pj3y-aaac	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T17:50:55.403638+00:00	Debian Oval Importer	Affected by	VCID-7jf3-227f-aaas	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T17:46:19.888437+00:00	Debian Oval Importer	Affected by	VCID-pb6q-3j39-aaaf	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T17:44:31.278207+00:00	Debian Oval Importer	Affected by	VCID-59gg-vg2h-aaae	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T17:40:24.466061+00:00	Debian Oval Importer	Affected by	VCID-akm6-w59h-aaak	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T17:33:07.857899+00:00	Debian Oval Importer	Affected by	VCID-f89j-dkdk-aaah	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T17:31:49.729979+00:00	Debian Oval Importer	Affected by	VCID-bhgn-gct9-aaae	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T17:31:10.045983+00:00	Debian Oval Importer	Affected by	VCID-4q2b-jwqb-aaas	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T17:28:04.457945+00:00	Debian Oval Importer	Affected by	VCID-7kgb-jke8-aaan	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T17:27:30.694832+00:00	Debian Oval Importer	Affected by	VCID-fwhc-xtwd-aaag	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T17:24:49.715887+00:00	Debian Oval Importer	Affected by	VCID-tv97-anfg-aaam	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T17:24:06.248576+00:00	Debian Oval Importer	Affected by	VCID-3wvj-4a66-aaaq	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T17:23:52.137565+00:00	Debian Oval Importer	Affected by	VCID-k3vw-m137-aaan	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T17:17:40.423358+00:00	Debian Oval Importer	Affected by	VCID-tr2g-xya5-aaaj	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T17:16:20.557780+00:00	Debian Oval Importer	Affected by	VCID-m8vg-2sz1-aaas	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T17:16:16.989447+00:00	Debian Oval Importer	Fixing	VCID-gd5c-rvxf-aaam	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T17:14:56.438072+00:00	Debian Oval Importer	Affected by	VCID-urwg-y5xz-aaag	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T17:12:01.338321+00:00	Debian Oval Importer	Affected by	VCID-aus1-t1px-aaar	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T17:11:02.725894+00:00	Debian Oval Importer	Affected by	VCID-sa8w-pzne-aaas	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T17:02:39.313480+00:00	Debian Oval Importer	Affected by	VCID-qynw-xq2t-aaap	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T17:00:40.085436+00:00	Debian Oval Importer	Affected by	VCID-y6ym-xe1c-aaaq	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T16:59:15.075995+00:00	Debian Oval Importer	Affected by	VCID-7ufk-791q-aaae	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T16:58:01.786043+00:00	Debian Oval Importer	Affected by	VCID-f9ks-vah3-aaaa	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T16:51:46.676406+00:00	Debian Oval Importer	Affected by	VCID-hphf-74rm-aaaa	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T16:48:25.419999+00:00	Debian Oval Importer	Affected by	VCID-at1z-tdh1-aaan	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T16:45:43.622954+00:00	Debian Oval Importer	Affected by	VCID-ycgv-unnm-aaag	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T16:41:14.344616+00:00	Debian Oval Importer	Affected by	VCID-9xdp-s1sy-aaaq	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T16:32:05.983515+00:00	Debian Oval Importer	Affected by	VCID-1ut1-kx68-aaab	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T16:22:56.991251+00:00	Debian Oval Importer	Affected by	VCID-qhwj-913t-aaan	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T16:21:13.277585+00:00	Debian Oval Importer	Affected by	VCID-keup-3kbx-aaaj	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	36.0.0
2025-04-12T16:11:48.450490+00:00	Debian Oval Importer	Affected by	VCID-hphf-74rm-aaaa	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-12T15:57:50.510219+00:00	Debian Oval Importer	Affected by	VCID-4q2b-jwqb-aaas	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T08:38:11.922020+00:00	Debian Oval Importer	Affected by	VCID-ydzn-t292-aaad	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T08:36:46.228219+00:00	Debian Oval Importer	Affected by	VCID-aus1-t1px-aaar	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T08:21:33.525465+00:00	Debian Oval Importer	Affected by	VCID-tr2g-xya5-aaaj	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T07:54:47.466990+00:00	Debian Oval Importer	Affected by	VCID-zh8q-p26k-aaas	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T07:54:46.722120+00:00	Debian Oval Importer	Affected by	VCID-2e4k-6z9d-aaab	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T07:49:45.158894+00:00	Debian Oval Importer	Affected by	VCID-urwg-y5xz-aaag	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T07:34:37.028230+00:00	Debian Oval Importer	Affected by	VCID-8ex1-6xse-aaab	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T07:34:29.738383+00:00	Debian Oval Importer	Affected by	VCID-38ac-xq25-aaaq	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T07:27:45.044434+00:00	Debian Oval Importer	Affected by	VCID-qynw-xq2t-aaap	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T07:19:27.851968+00:00	Debian Oval Importer	Affected by	VCID-hgcw-v93v-aaad	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T07:18:15.710104+00:00	Debian Oval Importer	Fixing	VCID-gh8f-mrk4-aaar	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T07:04:59.530716+00:00	Debian Oval Importer	Affected by	VCID-2txe-5685-aaar	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T06:59:49.655464+00:00	Debian Oval Importer	Affected by	VCID-y6ym-xe1c-aaaq	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T06:56:13.071920+00:00	Debian Oval Importer	Fixing	VCID-mbfm-pxzx-aaaa	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T06:50:56.616629+00:00	Debian Oval Importer	Affected by	VCID-n724-h9bq-aaak	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T06:27:26.244300+00:00	Debian Oval Importer	Affected by	VCID-fwhc-xtwd-aaag	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T06:26:49.645975+00:00	Debian Oval Importer	Affected by	VCID-1pw8-kzjs-aaah	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T06:07:47.158316+00:00	Debian Oval Importer	Affected by	VCID-y687-awyz-aaag	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T06:06:14.831759+00:00	Debian Oval Importer	Fixing	VCID-gd5c-rvxf-aaam	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T06:04:45.986033+00:00	Debian Oval Importer	Affected by	VCID-zyhx-9g42-aaae	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T05:59:38.960877+00:00	Debian Oval Importer	Affected by	VCID-tv97-anfg-aaam	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T05:57:34.904654+00:00	Debian Oval Importer	Affected by	VCID-f89j-dkdk-aaah	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T05:56:11.516570+00:00	Debian Oval Importer	Affected by	VCID-bp3f-tajm-aaaf	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T05:53:02.519565+00:00	Debian Oval Importer	Affected by	VCID-gbqb-um5f-aaac	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T05:45:20.012879+00:00	Debian Oval Importer	Affected by	VCID-9xdp-s1sy-aaaq	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T05:41:22.397351+00:00	Debian Oval Importer	Affected by	VCID-at1z-tdh1-aaan	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T05:33:16.054283+00:00	Debian Oval Importer	Affected by	VCID-fe1a-1s8p-aaaf	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T05:29:26.869760+00:00	Debian Oval Importer	Affected by	VCID-bhgn-gct9-aaae	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T05:23:56.281484+00:00	Debian Oval Importer	Affected by	VCID-1ut1-kx68-aaab	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T05:19:19.018263+00:00	Debian Oval Importer	Affected by	VCID-azqw-d7r1-aaad	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T05:09:20.249716+00:00	Debian Oval Importer	Affected by	VCID-dhd7-4u65-aaaa	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T05:08:16.868574+00:00	Debian Oval Importer	Fixing	VCID-r4f3-hm1w-aaap	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T05:08:02.445866+00:00	Debian Oval Importer	Affected by	VCID-xb7m-ngk2-aaae	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T05:01:19.201183+00:00	Debian Oval Importer	Affected by	VCID-aap7-715h-aaab	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T05:00:40.672910+00:00	Debian Oval Importer	Affected by	VCID-faaf-e9j7-aaac	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T04:40:58.061080+00:00	Debian Oval Importer	Affected by	VCID-uy1p-tvx3-aaah	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T04:39:23.097272+00:00	Debian Oval Importer	Affected by	VCID-ah5y-k5sb-aaap	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T04:32:27.592482+00:00	Debian Oval Importer	Affected by	VCID-mj69-gx7y-aaah	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T04:29:36.301023+00:00	Debian Oval Importer	Affected by	VCID-p4de-8vmj-aaah	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T04:29:14.467557+00:00	Debian Oval Importer	Affected by	VCID-3f62-6xn7-aaab	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T04:27:51.337927+00:00	Debian Oval Importer	Affected by	VCID-9cq6-c3xb-aaam	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T04:22:13.294282+00:00	Debian Oval Importer	Fixing	VCID-xfq2-pqeb-aaah	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T04:20:24.369423+00:00	Debian Oval Importer	Affected by	VCID-3tye-xqmf-aaaa	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T04:05:26.929544+00:00	Debian Oval Importer	Fixing	VCID-w1e2-vvzz-aaam	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T04:03:13.319087+00:00	Debian Oval Importer	Affected by	VCID-f9ks-vah3-aaaa	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T04:02:45.890235+00:00	Debian Oval Importer	Affected by	VCID-g6qq-mucg-aaar	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T04:01:08.777003+00:00	Debian Oval Importer	Fixing	VCID-uuyp-pj3y-aaac	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T03:53:53.817177+00:00	Debian Oval Importer	Affected by	VCID-tm36-42qs-aaah	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T03:43:41.260377+00:00	Debian Oval Importer	Affected by	VCID-zqf1-jg5k-aaap	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T03:42:23.296112+00:00	Debian Oval Importer	Affected by	VCID-k3vw-m137-aaan	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T03:33:55.448044+00:00	Debian Oval Importer	Affected by	VCID-fbrx-yzny-aaae	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T03:30:36.636277+00:00	Debian Oval Importer	Affected by	VCID-jwgf-c1pr-aaan	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T03:28:34.541403+00:00	Debian Oval Importer	Affected by	VCID-59gg-vg2h-aaae	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T03:25:46.331265+00:00	Debian Oval Importer	Affected by	VCID-sa8w-pzne-aaas	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T03:25:39.888435+00:00	Debian Oval Importer	Affected by	VCID-egth-zjt7-aaab	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T03:24:15.145142+00:00	Debian Oval Importer	Affected by	VCID-b5eq-97nn-aaah	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T03:21:54.102145+00:00	Debian Oval Importer	Affected by	VCID-keup-3kbx-aaaj	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T03:13:53.870184+00:00	Debian Oval Importer	Affected by	VCID-k1m8-1qs1-aaab	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T03:13:39.868359+00:00	Debian Oval Importer	Affected by	VCID-7kgb-jke8-aaan	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T03:09:40.040456+00:00	Debian Oval Importer	Affected by	VCID-9u66-uk51-aaak	https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2	36.0.0
2025-04-08T03:05:34.630699+00:00	Debian Oval Importer	Fixing	VCID-fwhc-xtwd-aaag	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.0.0
2025-04-08T03:02:32.710803+00:00	Debian Oval Importer	Fixing	VCID-tv97-anfg-aaam	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.0.0
2025-04-08T03:02:22.809193+00:00	Debian Oval Importer	Fixing	VCID-9xdp-s1sy-aaaq	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.0.0
2025-04-08T03:01:18.698786+00:00	Debian Oval Importer	Fixing	VCID-gd5c-rvxf-aaam	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.0.0
2025-04-08T02:57:23.791874+00:00	Debian Oval Importer	Fixing	VCID-zqf1-jg5k-aaap	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.0.0
2025-04-08T02:56:33.974124+00:00	Debian Oval Importer	Fixing	VCID-tm36-42qs-aaah	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.0.0
2025-04-08T02:55:09.961563+00:00	Debian Oval Importer	Fixing	VCID-mbfm-pxzx-aaaa	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.0.0
2025-04-08T02:51:33.429654+00:00	Debian Oval Importer	Fixing	VCID-8ex1-6xse-aaab	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.0.0
2025-04-08T02:44:52.000070+00:00	Debian Oval Importer	Fixing	VCID-fe1a-1s8p-aaaf	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.0.0
2025-04-08T02:43:48.203884+00:00	Debian Oval Importer	Fixing	VCID-aap7-715h-aaab	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.0.0
2025-04-08T02:42:32.727940+00:00	Debian Oval Importer	Fixing	VCID-4q2b-jwqb-aaas	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.0.0
2025-04-08T02:40:17.871550+00:00	Debian Oval Importer	Fixing	VCID-f9ks-vah3-aaaa	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.0.0
2025-04-08T02:39:43.336310+00:00	Debian Oval Importer	Fixing	VCID-sa8w-pzne-aaas	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.0.0
2025-04-08T02:39:25.167763+00:00	Debian Oval Importer	Fixing	VCID-r4f3-hm1w-aaap	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.0.0
2025-04-08T02:38:47.467031+00:00	Debian Oval Importer	Fixing	VCID-uuyp-pj3y-aaac	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.0.0
2025-04-08T02:38:40.519937+00:00	Debian Oval Importer	Fixing	VCID-bhgn-gct9-aaae	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.0.0
2025-04-08T02:38:05.003616+00:00	Debian Oval Importer	Fixing	VCID-qynw-xq2t-aaap	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.0.0
2025-04-08T02:35:52.302164+00:00	Debian Oval Importer	Fixing	VCID-xfq2-pqeb-aaah	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.0.0
2025-04-08T02:34:57.640777+00:00	Debian Oval Importer	Fixing	VCID-w1e2-vvzz-aaam	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.0.0
2025-04-08T02:34:13.941938+00:00	Debian Oval Importer	Fixing	VCID-gh8f-mrk4-aaar	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.0.0
2025-04-08T02:31:39.250597+00:00	Debian Oval Importer	Fixing	VCID-azqw-d7r1-aaad	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.0.0
2025-04-08T02:30:45.998631+00:00	Debian Oval Importer	Fixing	VCID-2txe-5685-aaar	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	36.0.0
2025-04-08T00:43:47.158233+00:00	Debian Oval Importer	Affected by	VCID-prsw-emhu-aaaf	None	36.0.0
2025-04-08T00:43:46.434892+00:00	Debian Oval Importer	Affected by	VCID-t8e4-5s1r-aaar	None	36.0.0
2025-04-08T00:43:45.690902+00:00	Debian Oval Importer	Affected by	VCID-akm6-w59h-aaak	None	36.0.0
2025-04-08T00:43:44.964851+00:00	Debian Oval Importer	Affected by	VCID-2e4k-6z9d-aaab	None	36.0.0
2025-04-08T00:43:44.253419+00:00	Debian Oval Importer	Affected by	VCID-59gg-vg2h-aaae	None	36.0.0
2025-04-07T22:30:03.136260+00:00	Debian Oval Importer	Affected by	VCID-qhwj-913t-aaan	None	36.0.0
2025-04-07T22:29:17.470750+00:00	Debian Oval Importer	Affected by	VCID-6bag-p9re-aaaf	None	36.0.0
2025-04-07T21:53:42.149186+00:00	Debian Oval Importer	Affected by	VCID-qy5g-zjex-aaan	None	36.0.0
2025-04-07T21:24:03.588637+00:00	Debian Oval Importer	Affected by	VCID-7ycs-sa7m-aaar	None	36.0.0
2025-04-07T21:13:34.087114+00:00	Debian Oval Importer	Affected by	VCID-ru64-mr55-aaab	None	36.0.0
2025-04-07T21:09:29.163028+00:00	Debian Oval Importer	Affected by	VCID-7jf3-227f-aaas	None	36.0.0
2025-04-07T20:36:25.341699+00:00	Debian Oval Importer	Affected by	VCID-7ufk-791q-aaae	None	36.0.0
2025-04-07T20:08:59.612345+00:00	Debian Oval Importer	Affected by	VCID-3bm7-tmfe-aaar	None	36.0.0
2025-04-07T19:04:42.304366+00:00	Debian Oval Importer	Affected by	VCID-ycgv-unnm-aaag	None	36.0.0
2025-04-07T18:07:19.836298+00:00	Debian Oval Importer	Affected by	VCID-3wvj-4a66-aaaq	None	36.0.0
2025-04-07T17:56:54.042105+00:00	Debian Oval Importer	Affected by	VCID-m8vg-2sz1-aaas	None	36.0.0
2025-04-07T17:56:41.194297+00:00	Debian Oval Importer	Affected by	VCID-pb6q-3j39-aaaf	None	36.0.0
2025-04-07T17:47:47.719760+00:00	Debian Oval Importer	Affected by	VCID-a3hy-ceqf-aaaq	None	36.0.0
2025-04-07T17:21:41.453462+00:00	Debian Oval Importer	Affected by	VCID-y6ym-xe1c-aaaq	None	36.0.0
2025-04-07T17:20:16.327302+00:00	Debian Oval Importer	Affected by	VCID-gbqb-um5f-aaac	None	36.0.0
2025-04-07T17:20:01.946312+00:00	Debian Oval Importer	Affected by	VCID-k1m8-1qs1-aaab	None	36.0.0
2025-04-07T17:10:26.486078+00:00	Debian Oval Importer	Affected by	VCID-zqf1-jg5k-aaap	None	36.0.0
2025-04-07T17:06:59.071198+00:00	Debian Oval Importer	Affected by	VCID-f89j-dkdk-aaah	None	36.0.0
2025-04-07T16:56:59.794696+00:00	Debian Oval Importer	Affected by	VCID-38ac-xq25-aaaq	None	36.0.0
2025-04-07T16:53:14.782330+00:00	Debian Oval Importer	Affected by	VCID-mj69-gx7y-aaah	None	36.0.0
2025-04-07T16:50:34.542095+00:00	Debian Oval Importer	Affected by	VCID-aap7-715h-aaab	None	36.0.0
2025-04-07T16:42:48.386360+00:00	Debian Oval Importer	Affected by	VCID-egth-zjt7-aaab	None	36.0.0
2025-04-07T16:40:46.822678+00:00	Debian Oval Importer	Affected by	VCID-4q2b-jwqb-aaas	None	36.0.0
2025-04-07T16:40:27.541498+00:00	Debian Oval Importer	Affected by	VCID-tv97-anfg-aaam	None	36.0.0
2025-04-07T16:39:04.580354+00:00	Debian Oval Importer	Affected by	VCID-bhgn-gct9-aaae	None	36.0.0
2025-04-07T16:35:10.091197+00:00	Debian Oval Importer	Fixing	VCID-w1e2-vvzz-aaam	None	36.0.0
2025-04-07T16:32:39.289504+00:00	Debian Oval Importer	Affected by	VCID-fwhc-xtwd-aaag	None	36.0.0
2025-04-07T16:32:13.101503+00:00	Debian Oval Importer	Fixing	VCID-gd5c-rvxf-aaam	None	36.0.0
2025-04-07T16:24:11.609251+00:00	Debian Oval Importer	Affected by	VCID-fe1a-1s8p-aaaf	None	36.0.0
2025-04-07T16:15:01.976785+00:00	Debian Oval Importer	Affected by	VCID-faaf-e9j7-aaac	None	36.0.0
2025-04-07T16:12:51.409256+00:00	Debian Oval Importer	Affected by	VCID-g6qq-mucg-aaar	None	36.0.0
2025-04-07T15:49:54.004049+00:00	Debian Oval Importer	Affected by	VCID-tr2g-xya5-aaaj	None	36.0.0
2025-04-07T15:49:18.836977+00:00	Debian Oval Importer	Affected by	VCID-jwgf-c1pr-aaan	None	36.0.0
2025-04-07T15:48:42.650907+00:00	Debian Oval Importer	Affected by	VCID-b5eq-97nn-aaah	None	36.0.0
2025-04-07T15:48:23.348746+00:00	Debian Oval Importer	Affected by	VCID-zyhx-9g42-aaae	None	36.0.0
2025-04-07T15:26:04.051022+00:00	Debian Oval Importer	Affected by	VCID-xb7m-ngk2-aaae	None	36.0.0
2025-04-07T15:18:02.322679+00:00	Debian Oval Importer	Affected by	VCID-ah5y-k5sb-aaap	None	36.0.0
2025-04-07T15:15:26.228022+00:00	Debian Oval Importer	Affected by	VCID-sa8w-pzne-aaas	None	36.0.0
2025-04-07T15:02:53.030979+00:00	Debian Oval Importer	Affected by	VCID-bp3f-tajm-aaaf	None	36.0.0
2025-04-07T15:01:22.218817+00:00	Debian Oval Importer	Affected by	VCID-tm36-42qs-aaah	None	36.0.0
2025-04-07T14:57:36.905861+00:00	Debian Oval Importer	Affected by	VCID-zh8q-p26k-aaas	None	36.0.0
2025-04-07T14:45:47.400743+00:00	Debian Oval Importer	Fixing	VCID-gh8f-mrk4-aaar	None	36.0.0
2025-04-07T14:38:24.356679+00:00	Debian Oval Importer	Affected by	VCID-p4de-8vmj-aaah	None	36.0.0
2025-04-07T14:31:53.341550+00:00	Debian Oval Importer	Affected by	VCID-9u66-uk51-aaak	None	36.0.0
2025-04-07T14:20:59.563401+00:00	Debian Oval Importer	Affected by	VCID-hphf-74rm-aaaa	None	36.0.0
2025-04-07T14:17:35.275348+00:00	Debian Oval Importer	Affected by	VCID-8ex1-6xse-aaab	None	36.0.0
2025-04-07T14:11:07.809853+00:00	Debian Oval Importer	Affected by	VCID-2txe-5685-aaar	None	36.0.0
2025-04-07T14:08:10.506798+00:00	Debian Oval Importer	Affected by	VCID-3tye-xqmf-aaaa	None	36.0.0
2025-04-07T14:06:51.830656+00:00	Debian Oval Importer	Affected by	VCID-y687-awyz-aaag	None	36.0.0
2025-04-07T14:05:50.305765+00:00	Debian Oval Importer	Fixing	VCID-xfq2-pqeb-aaah	None	36.0.0
2025-04-07T14:01:54.578609+00:00	Debian Oval Importer	Affected by	VCID-fbrx-yzny-aaae	None	36.0.0
2025-04-07T13:57:13.273018+00:00	Debian Oval Importer	Affected by	VCID-keup-3kbx-aaaj	None	36.0.0
2025-04-07T13:51:59.087723+00:00	Debian Oval Importer	Affected by	VCID-9xdp-s1sy-aaaq	None	36.0.0
2025-04-07T13:48:16.655545+00:00	Debian Oval Importer	Affected by	VCID-f9ks-vah3-aaaa	None	36.0.0
2025-04-07T13:44:10.419589+00:00	Debian Oval Importer	Fixing	VCID-mbfm-pxzx-aaaa	None	36.0.0
2025-04-07T13:42:48.939676+00:00	Debian Oval Importer	Affected by	VCID-qynw-xq2t-aaap	None	36.0.0
2025-04-07T13:35:17.156975+00:00	Debian Oval Importer	Affected by	VCID-7kgb-jke8-aaan	None	36.0.0
2025-04-07T13:25:56.391336+00:00	Debian Oval Importer	Fixing	VCID-uuyp-pj3y-aaac	None	36.0.0
2025-04-07T13:25:51.433284+00:00	Debian Oval Importer	Affected by	VCID-n724-h9bq-aaak	None	36.0.0
2025-04-07T13:22:21.617014+00:00	Debian Oval Importer	Affected by	VCID-3f62-6xn7-aaab	None	36.0.0
2025-04-07T13:18:53.829250+00:00	Debian Oval Importer	Affected by	VCID-hgcw-v93v-aaad	None	36.0.0
2025-04-07T13:17:22.066875+00:00	Debian Oval Importer	Affected by	VCID-uy1p-tvx3-aaah	None	36.0.0
2025-04-07T13:07:33.737420+00:00	Debian Oval Importer	Affected by	VCID-dhd7-4u65-aaaa	None	36.0.0
2025-04-07T13:04:41.712489+00:00	Debian Oval Importer	Affected by	VCID-zbqw-eg13-aaam	None	36.0.0
2025-04-07T13:01:31.926175+00:00	Debian Oval Importer	Affected by	VCID-1pw8-kzjs-aaah	None	36.0.0
2025-04-07T12:56:19.120853+00:00	Debian Oval Importer	Affected by	VCID-1ut1-kx68-aaab	None	36.0.0
2025-04-07T12:45:07.048127+00:00	Debian Oval Importer	Affected by	VCID-azqw-d7r1-aaad	None	36.0.0
2025-04-07T12:43:50.905583+00:00	Debian Oval Importer	Affected by	VCID-k3vw-m137-aaan	None	36.0.0
2025-04-07T12:30:57.974690+00:00	Debian Oval Importer	Affected by	VCID-ydzn-t292-aaad	None	36.0.0
2025-04-07T12:30:56.565904+00:00	Debian Oval Importer	Affected by	VCID-9cq6-c3xb-aaam	None	36.0.0
2025-04-07T12:27:31.668831+00:00	Debian Oval Importer	Fixing	VCID-fe1a-1s8p-aaaf	None	36.0.0
2025-04-07T12:24:56.077112+00:00	Debian Oval Importer	Fixing	VCID-r4f3-hm1w-aaap	None	36.0.0
2025-04-07T12:24:45.194710+00:00	Debian Oval Importer	Fixing	VCID-tv97-anfg-aaam	None	36.0.0
2025-04-07T12:22:04.516105+00:00	Debian Oval Importer	Fixing	VCID-8ex1-6xse-aaab	None	36.0.0
2025-04-07T12:20:48.535297+00:00	Debian Oval Importer	Fixing	VCID-azqw-d7r1-aaad	None	36.0.0
2025-04-07T08:33:18.931166+00:00	Debian Importer	Affected by	VCID-egth-zjt7-aaab	None	36.0.0
2025-04-06T19:37:19.239039+00:00	Debian Importer	Affected by	VCID-tr2g-xya5-aaaj	None	36.0.0
2025-04-06T08:42:22.090861+00:00	Debian Importer	Affected by	VCID-1ut1-kx68-aaab	None	36.0.0
2025-02-20T19:57:08.343732+00:00	Debian Importer	Affected by	VCID-1ut1-kx68-aaab	None	35.1.0
2025-02-20T19:57:06.421558+00:00	Debian Importer	Affected by	VCID-hphf-74rm-aaaa	None	35.1.0
2025-02-20T19:57:03.141660+00:00	Debian Importer	Affected by	VCID-tr2g-xya5-aaaj	None	35.1.0
2025-02-20T07:44:28.560533+00:00	Debian Importer	Affected by	VCID-egth-zjt7-aaab	None	35.1.0
2024-11-23T12:34:49.477640+00:00	Debian Importer	Affected by	VCID-1ut1-kx68-aaab	None	35.0.0
2024-11-23T12:34:47.716578+00:00	Debian Importer	Affected by	VCID-hphf-74rm-aaaa	None	35.0.0
2024-11-23T12:34:44.385486+00:00	Debian Importer	Affected by	VCID-tr2g-xya5-aaaj	None	35.0.0
2024-11-23T01:20:27.918415+00:00	Debian Importer	Affected by	VCID-egth-zjt7-aaab	None	35.0.0
2024-10-10T10:25:04.397063+00:00	Debian Importer	Affected by	VCID-1ut1-kx68-aaab	None	34.0.2
2024-10-10T10:25:02.588918+00:00	Debian Importer	Affected by	VCID-hphf-74rm-aaaa	None	34.0.2
2024-10-10T10:24:59.138197+00:00	Debian Importer	Affected by	VCID-tr2g-xya5-aaaj	None	34.0.2
2024-10-09T23:50:52.745684+00:00	Debian Importer	Affected by	VCID-egth-zjt7-aaab	None	34.0.2
2024-09-19T17:00:02.257454+00:00	Debian Importer	Affected by	VCID-1ut1-kx68-aaab	None	34.0.1
2024-09-19T17:00:00.622732+00:00	Debian Importer	Affected by	VCID-hphf-74rm-aaaa	None	34.0.1
2024-09-19T16:59:57.328056+00:00	Debian Importer	Affected by	VCID-tr2g-xya5-aaaj	None	34.0.1
2024-09-19T07:26:18.128003+00:00	Debian Importer	Affected by	VCID-egth-zjt7-aaab	None	34.0.1
2024-04-25T14:02:57.043258+00:00	Debian Importer	Affected by	VCID-1ut1-kx68-aaab	None	34.0.0rc4
2024-04-25T14:02:55.642623+00:00	Debian Importer	Affected by	VCID-hphf-74rm-aaaa	None	34.0.0rc4
2024-04-25T14:02:52.292222+00:00	Debian Importer	Affected by	VCID-tr2g-xya5-aaaj	None	34.0.0rc4
2024-04-25T05:54:06.652238+00:00	Debian Importer	Affected by	VCID-egth-zjt7-aaab	None	34.0.0rc4
2024-01-11T15:43:15.615826+00:00	Debian Importer	Affected by	VCID-1ut1-kx68-aaab	None	34.0.0rc2
2024-01-11T15:43:14.240675+00:00	Debian Importer	Affected by	VCID-hphf-74rm-aaaa	None	34.0.0rc2
2024-01-11T15:43:10.966502+00:00	Debian Importer	Affected by	VCID-tr2g-xya5-aaaj	None	34.0.0rc2
2024-01-11T07:54:10.036158+00:00	Debian Importer	Affected by	VCID-egth-zjt7-aaab	None	34.0.0rc2
2024-01-05T01:06:59.621909+00:00	Debian Importer	Affected by	VCID-1ut1-kx68-aaab	None	34.0.0rc1
2024-01-05T01:06:58.234277+00:00	Debian Importer	Affected by	VCID-hphf-74rm-aaaa	None	34.0.0rc1
2024-01-05T01:06:55.010418+00:00	Debian Importer	Affected by	VCID-tr2g-xya5-aaaj	None	34.0.0rc1
2024-01-04T18:21:30.087624+00:00	Debian Importer	Affected by	VCID-egth-zjt7-aaab	None	34.0.0rc1

Next non-vulnerable version	1:1.39.1-2~bpo11+1
Latest non-vulnerable version	1:1.43.1+dfsg-2
Risk	10.0