cherrytree vulnerabilities (Debian)

2 vulnerabilities.

• cherrytree Debian CherryTree through 1.7.2 Local File Disclosure via Embedded-File Filename Path CVE-2026-118693 5.6 MediumOctober 28, 2026
• cherrytree Debian CherryTree through 1.7.2 OS Command Injection via Custom Web Link Action CVE-2026-118692 7.1 HighOctober 28, 2026