This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2026-58032 →

DEBIAN-CVE-2026-58032

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vu...

Original description

The description as published by the source.

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Api/index.Js. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 mediawiki

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 mediawiki

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.43.9+dfsg-1~deb13u1"}]}]

Debian:14 mediawiki

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.43.9+dfsg-1"}]}]

References

advisory security-tracker.debian.org