[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Jul 1 21:29:03 BST 2025



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
22abd8eb by Salvatore Bonaccorso at 2025-07-01T22:28:24+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -19,11 +19,11 @@ CVE-2025-6955 (A vulnerability was found in Campcodes Employee Management System
 CVE-2025-6954 (A vulnerability has been found in Campcodes Employee Management System ...)
 	NOT-FOR-US: Campcodes
 CVE-2025-6953 (A vulnerability, which was classified as critical, was found in TOTOLI ...)
-	TODO: check
+	NOT-FOR-US: TOTOLINK
 CVE-2025-6952 (A vulnerability, which was classified as problematic, has been found i ...)
 	TODO: check
 CVE-2025-6951 (A vulnerability classified as problematic was found in SAFECAM X300 up ...)
-	TODO: check
+	NOT-FOR-US: SAFECAM
 CVE-2025-6756 (The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2025-6600 (An exposure of sensitive information vulnerability was identified in G ...)
@@ -35,21 +35,21 @@ CVE-2025-5314 (The Dear Flipbook \u2013 PDF Flipbook, 3D Flipbook, PDF embed, PD
 CVE-2025-5072 (Resource leak vulnerability in ASR180x\u3001ASR190x in con_mgrallows R ...)
 	TODO: check
 CVE-2025-53107 (@cyanheads/git-mcp-server is an MCP server designed to interact with G ...)
-	TODO: check
+	NOT-FOR-US: cyanheads/git-mcp-server
 CVE-2025-53104 (gluestack-ui is a library of copy-pasteable components & patterns craf ...)
-	TODO: check
+	NOT-FOR-US: gluestack-ui
 CVE-2025-53103 (JUnit is a testing framework for Java and the JVM. From version 5.12.0 ...)
 	TODO: check
 CVE-2025-53100 (RestDB's Codehooks.io MCP Server is an MCP server on the Codehooks.io  ...)
-	TODO: check
+	NOT-FOR-US: RestDB/codehooks-mcp-server
 CVE-2025-53099 (Sentry is a developer-first error tracking and performance monitoring  ...)
-	TODO: check
+	NOT-FOR-US: Sentry
 CVE-2025-52294 (Insufficient validation of the screen lock mechanism in Trust Wallet v ...)
-	TODO: check
+	NOT-FOR-US: Trust Wallet
 CVE-2025-50641 (Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the ad ...)
 	NOT-FOR-US: Tenda
 CVE-2025-50405 (Intelbras RX1500 Router v2.2.17 and before is vulnerable to Incorrect  ...)
-	TODO: check
+	NOT-FOR-US: Intelbras
 CVE-2025-50404 (Intelbras RX1500 Router v2.2.17 and before is vulnerable to Integer Ov ...)
 	TODO: check
 CVE-2025-49492 (Out-of-bounds write in ASR180x  in lte-telephony, May cause a buffer u ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/22abd8eb456fd6cc438df637736d6a4aff77d5ed

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/22abd8eb456fd6cc438df637736d6a4aff77d5ed
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250701/403d5ce0/attachment.htm>


More information about the debian-security-tracker-commits mailing list