[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sat Dec 27 08:31:26 GMT 2025



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4068298b by Salvatore Bonaccorso at 2025-12-27T09:31:07+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,29 +1,29 @@
 CVE-2025-68952 (Eigent is a multi-agent Workforce. In version 0.0.60, a 1-click Remote ...)
-	TODO: check
+	NOT-FOR-US: Eigent
 CVE-2025-68948 (SiYuan is self-hosted, open source personal knowledge management softw ...)
-	TODO: check
+	NOT-FOR-US: SiYuan
 CVE-2025-68932 (FreshRSS is a free, self-hostable RSS aggregator. Prior to version 1.2 ...)
 	- freshrss <itp> (bug #1032767)
 CVE-2025-68927 (Libredesk is a self-hosted customer support desk. Prior to version 0.8 ...)
-	TODO: check
+	NOT-FOR-US: Libredesk
 CVE-2025-68697 (n8n is an open source workflow automation platform. Prior to version 2 ...)
-	TODO: check
+	NOT-FOR-US: n8n
 CVE-2025-68668 (n8n is an open source workflow automation platform. From version 1.0.0 ...)
-	TODO: check
+	NOT-FOR-US: n8n
 CVE-2025-68474 (ESF-IDF is the Espressif Internet of Things (IOT) Development Framewor ...)
-	TODO: check
+	NOT-FOR-US: ESF-IDF
 CVE-2025-68473 (ESF-IDF is the Espressif Internet of Things (IOT) Development Framewor ...)
-	TODO: check
+	NOT-FOR-US: ESF-IDF
 CVE-2025-68148 (FreshRSS is a free, self-hostable RSS aggregator. From version 1.27.0  ...)
 	- freshrss <itp> (bug #1032767)
 CVE-2025-67729 (LMDeploy is a toolkit for compressing, deploying, and serving LLMs. Pr ...)
-	TODO: check
+	NOT-FOR-US: LMDeploy
 CVE-2025-66203 (StreamVault is a video download integration solution. Prior to version ...)
-	TODO: check
+	NOT-FOR-US: StreamVault
 CVE-2025-61914 (n8n is an open source workflow automation platform. Prior to version 1 ...)
-	TODO: check
+	NOT-FOR-US: n8n
 CVE-2025-59946 (NanoMQ MQTT Broker (NanoMQ) is an Edge Messaging Platform. Prior to ve ...)
-	TODO: check
+	NOT-FOR-US: NanoMQ
 CVE-2025-67349 (A cross-site scripting (XSS) vulnerability was identified in FluentCMS ...)
 	NOT-FOR-US: FluentCMS
 CVE-2025-67015 (Incorrect access control in Comtech EF Data CDM-625 / CDM-625A Advance ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4068298b9737dfc43fa85fff80a8d5c8cff9357f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4068298b9737dfc43fa85fff80a8d5c8cff9357f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251227/13db2566/attachment.htm>


More information about the debian-security-tracker-commits mailing list