3.7
Low
CVE-2026-56355 GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization
Description
GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Savane 3.14 | 3.14 → 3.17 | No fix stated |
References
- cgit.git.savannah.gnu.org cgit.git.savannah.gnu.org
- cgit.git.savannah.gnu.org cgit.git.savannah.gnu.org
- www.fsf.org www.fsf.org
- www.hacktron.ai www.hacktron.ai
- www.mallory.ai www.mallory.ai
- news.ycombinator.com news.ycombinator.com
Timeline
- Published
- Last modified