[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff (@jmm) jmm at debian.org
Tue Jul 1 13:15:01 BST 2025



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9df6c6b4 by Moritz Muehlenhoff at 2025-07-01T14:13:12+02:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -79,7 +79,7 @@ CVE-2025-53005 (DataEase is an open source business intelligence and data visual
 CVE-2025-53004 (DataEase is an open source business intelligence and data visualizatio ...)
 	NOT-FOR-US: DataEase
 CVE-2025-53003 (The Janssen Project is an open-source identity and access management ( ...)
-	TODO: check
+	NOT-FOR-US: Janssen
 CVE-2025-53001
 	REJECTED
 CVE-2025-52997 (File Browser provides a file managing interface within a specified dir ...)
@@ -113,7 +113,7 @@ CVE-2025-46702 (Mattermost versions 10.5.x <= 10.5.5, 9.11.x <= 9.11.15, 10.8.x
 CVE-2025-45931 (An issue D-Link DIR-816-A2 DIR-816A2_FWv1.10CNB05_R1B011D88210 allows  ...)
 	NOT-FOR-US: D-Link
 CVE-2025-45143 (string-math v1.2.2 was discovered to contain a Regex Denial of Service ...)
-	TODO: check
+	NOT-FOR-US: Node string-math
 CVE-2025-41439 (A reflected cross-site scripting vulnerability via a specific paramete ...)
 	NOT-FOR-US: RICOH
 CVE-2025-40734 (Reflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Ma ...)
@@ -141,9 +141,9 @@ CVE-2024-8419 (The endpoint hosts a script that allows an unauthorized remote at
 CVE-2024-53621 (A buffer overflow in the formSetCfm() function of Tenda AC1206 1200M 1 ...)
 	NOT-FOR-US: Tenda
 CVE-2024-49365 (tiny-secp256k1 is a tiny secp256k1 native/JS wrapper. Prior to version ...)
-	TODO: check
+	NOT-FOR-US: Node tiny-secp256k1
 CVE-2024-49364 (tiny-secp256k1 is a tiny secp256k1 native/JS wrapper. Prior to version ...)
-	TODO: check
+	NOT-FOR-US: Node tiny-secp256k1
 CVE-2024-46993 (Electron is an open source framework for writing cross-platform deskto ...)
 	- electron <itp> (bug #842420)
 CVE-2024-46992 (Electron is an open source framework for writing cross-platform deskto ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9df6c6b44ad3cb8b35c5a02b29fd75c867bbfecc

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9df6c6b44ad3cb8b35c5a02b29fd75c867bbfecc
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250701/706db430/attachment.htm>


More information about the debian-security-tracker-commits mailing list