[Git][security-tracker-team/security-tracker][master] Process some new NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
864d8274 by Salvatore Bonaccorso at 2026-04-03T21:41:58+02:00
Process some new NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,27 +1,27 @@
 CVE-2026-5476 (A vulnerability was identified in NASA cFS up to 7.0.0 on 32-bit. Affe ...)
-	TODO: check
+	NOT-FOR-US: NASA cFS
 CVE-2026-5475 (A vulnerability was determined in NASA cFS up to 7.0.0. This impacts t ...)
-	TODO: check
+	NOT-FOR-US: NASA cFS
 CVE-2026-5474 (A vulnerability was found in NASA cFS up to 7.0.0. This affects the fu ...)
-	TODO: check
+	NOT-FOR-US: NASA cFS
 CVE-2026-5473 (A vulnerability has been found in NASA cFS up to 7.0.0. The impacted e ...)
-	TODO: check
+	NOT-FOR-US: NASA cFS
 CVE-2026-5472 (A flaw has been found in ProjectsAndPrograms School Management System  ...)
-	TODO: check
+	NOT-FOR-US: ProjectsAndPrograms School Management System
 CVE-2026-5471 (A vulnerability was detected in Investory Toy Planet Trouble App up to ...)
-	TODO: check
+	NOT-FOR-US: Investory Toy Planet Trouble App
 CVE-2026-5470 (A security vulnerability has been detected in mixelpixx Google-Researc ...)
-	TODO: check
+	NOT-FOR-US: mixelpixx Google-Research-MCP
 CVE-2026-5469 (A weakness has been identified in Casdoor 2.356.0. This vulnerability  ...)
-	TODO: check
+	NOT-FOR-US: Casdoor
 CVE-2026-5468 (A security flaw has been discovered in Casdoor 2.356.0. This affects t ...)
-	TODO: check
+	NOT-FOR-US: Casdoor
 CVE-2026-5467 (A vulnerability was identified in Casdoor 2.356.0. Affected by this is ...)
-	TODO: check
+	NOT-FOR-US: Casdoor
 CVE-2026-5462 (A vulnerability was identified in Wahoo Fitness SYSTM App up to 7.2.1  ...)
-	TODO: check
+	NOT-FOR-US: Wahoo Fitness SYSTM App
 CVE-2026-5458 (A weakness has been identified in Noelse Individuals & Pro App up to 2 ...)
-	TODO: check
+	NOT-FOR-US: Noelse Individuals & Pro App
 CVE-2026-4350 (The Perfmatters plugin for WordPress is vulnerable to arbitrary file d ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-4108 (Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are  ...)
@@ -33,11 +33,11 @@ CVE-2026-3880 (Zohocorp ManageEngine Exchange Reporter Plus versions before 5802
 CVE-2026-3879 (Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are  ...)
 	NOT-FOR-US: Zoho
 CVE-2026-35218 (Budibase is an open-source low-code platform. Prior to version 3.32.5, ...)
-	TODO: check
+	NOT-FOR-US: Budibase
 CVE-2026-35216 (Budibase is an open-source low-code platform. Prior to version 3.33.4, ...)
-	TODO: check
+	NOT-FOR-US: Budibase
 CVE-2026-35214 (Budibase is an open-source low-code platform. Prior to version 3.33.4, ...)
-	TODO: check
+	NOT-FOR-US: Budibase
 CVE-2026-32186 (Microsoft Bing Elevation of Privilege Vulnerability)
 	TODO: check
 CVE-2026-31818 (Budibase is an open-source low-code platform. Prior to version 3.33.4, ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/864d8274d65ccefb0cf9d7ba9df29442382a7dd3

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/864d8274d65ccefb0cf9d7ba9df29442382a7dd3
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260403/9baf8ffe/attachment.htm>