CVE-2026-47728: Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, Bugsink resolved sourcemaps and debug files by debug ID without scoping that lookup to the project that owned the uploaded metadata. An au
Affects 0 Linux releases across 0 (distro × package) combinations. First disclosed: 2026-05-26.
Fix per ecosystem
Each block below is a distro release where CVE-2026-47728 has a known fix. Run the listed command on that distro to remediate.
5-second check on your actual server. Reads /etc/os-release, uname -r, and the distro's package manager; matches against this same cross-source index live.
curl https://mindsparkstack.com/scan.sh | bash
CVE-2026-47728dropped silently in your distro's update channel. Every new CVE is the same story. StackPatch runs the matcher hourly against all 5 sources and emails the exact remediation when something new applies to one of your servers. $99 lifetime, 50 founder seats, 30-day refund.
See StackPatch ($99 lifetime)