[SECURITY] [DSA 6435-1] spip security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6435-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 12, 2026 https://www.debian.org/security/faq -...

DEBIAN-CVE-2026-66738

SPIP before 4.4.18 contains a code injection vulnerability in SQLite-backed installations. The navigation menu endpoint improperly handles array-typed user input, which bypasses input sanitization and allows the value to break out of an internal quoted string context when evaluated as PHP. An...

CVE-2026-66738

creationtimestamp| type| source ---|---|--- 2026-08-10 16:15:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/53mnn22alhix4 2026-08-10 17:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msql7pnmsx27 2026-08-10 23:01:49+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2026-66738

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SPIP before 4.4.18 contains a code injection vulnerability in SQLite-backed installations. The navigation menu endpoint improperly handles array-typed user inpu...