mirror of
https://github.com/openwrt/packages.git
synced 2026-10-14 14:17:12 +04:00
Security release: CVE-2026-77050 (denial of service in get_supported_language_variant()), CVE-2026-84429 (denial of service in parse_header_parameters(), reachable through the Accept and Content-Type headers), CVE-2026-87890 (request forgery via spatial lookup byte values) and CVE-2026-87975 (privilege abuse in model formsets with editable primary keys). It also completes an insufficient mitigation of CVE-2026-15307 shipped in 6.1. Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>