This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2026-58027 →

DEBIAN-CVE-2026-58027

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with...

Original description

The description as published by the source.

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/Api/QueryAbuseFilters.Php. This issue affects AbuseFilter: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 mediawiki

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 mediawiki

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.43.9+dfsg-1~deb13u1"}]}]

Debian:14 mediawiki

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.43.9+dfsg-1"}]}]

References

advisory security-tracker.debian.org