Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-58030 →

DEBIAN-CVE-2026-58030

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation SyntaxHighlight_GeSH...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation SyntaxHighlight_GeSHi. This vulnerability is associated with program files includes/SyntaxHighlight.Php. This issue affects SyntaxHighlight_GeSHi: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 mediawiki

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 mediawiki

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.43.9+dfsg-1~deb13u1"}]}]

Debian:14 mediawiki

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.43.9+dfsg-1"}]}]

Références

advisory security-tracker.debian.org