[Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sat Dec 27 08:31:26 GMT 2025
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
4068298b by Salvatore Bonaccorso at 2025-12-27T09:31:07+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,29 +1,29 @@
CVE-2025-68952 (Eigent is a multi-agent Workforce. In version 0.0.60, a 1-click Remote ...)
- TODO: check
+ NOT-FOR-US: Eigent
CVE-2025-68948 (SiYuan is self-hosted, open source personal knowledge management softw ...)
- TODO: check
+ NOT-FOR-US: SiYuan
CVE-2025-68932 (FreshRSS is a free, self-hostable RSS aggregator. Prior to version 1.2 ...)
- freshrss <itp> (bug #1032767)
CVE-2025-68927 (Libredesk is a self-hosted customer support desk. Prior to version 0.8 ...)
- TODO: check
+ NOT-FOR-US: Libredesk
CVE-2025-68697 (n8n is an open source workflow automation platform. Prior to version 2 ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2025-68668 (n8n is an open source workflow automation platform. From version 1.0.0 ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2025-68474 (ESF-IDF is the Espressif Internet of Things (IOT) Development Framewor ...)
- TODO: check
+ NOT-FOR-US: ESF-IDF
CVE-2025-68473 (ESF-IDF is the Espressif Internet of Things (IOT) Development Framewor ...)
- TODO: check
+ NOT-FOR-US: ESF-IDF
CVE-2025-68148 (FreshRSS is a free, self-hostable RSS aggregator. From version 1.27.0 ...)
- freshrss <itp> (bug #1032767)
CVE-2025-67729 (LMDeploy is a toolkit for compressing, deploying, and serving LLMs. Pr ...)
- TODO: check
+ NOT-FOR-US: LMDeploy
CVE-2025-66203 (StreamVault is a video download integration solution. Prior to version ...)
- TODO: check
+ NOT-FOR-US: StreamVault
CVE-2025-61914 (n8n is an open source workflow automation platform. Prior to version 1 ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2025-59946 (NanoMQ MQTT Broker (NanoMQ) is an Edge Messaging Platform. Prior to ve ...)
- TODO: check
+ NOT-FOR-US: NanoMQ
CVE-2025-67349 (A cross-site scripting (XSS) vulnerability was identified in FluentCMS ...)
NOT-FOR-US: FluentCMS
CVE-2025-67015 (Incorrect access control in Comtech EF Data CDM-625 / CDM-625A Advance ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4068298b9737dfc43fa85fff80a8d5c8cff9357f
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4068298b9737dfc43fa85fff80a8d5c8cff9357f
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251227/13db2566/attachment.htm>
More information about the debian-security-tracker-commits
mailing list