[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
162fd10e by security tracker role at 2026-08-02T19:13:45+00:00
automatic NOT-FOR-US entries update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -15,11 +15,11 @@ CVE-2026-67356 (ArcadeDB before 26.7.3 binds the real LocalDatabase object into
 CVE-2026-65321 (PyAthena prior to 3.35.4 contains a sql injection vulnerability that a ...)
 	TODO: check
 CVE-2026-12231 (The Exclusive Addons for Elementor plugin for WordPress is vulnerable  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-10848 (The OCPP 1.6 client in subsys/net/lib/ocpp parsed inbound WAMP RPC fra ...)
-	TODO: check
+	NOT-FOR-US: Zephyr, different from src:zephyr
 CVE-2026-10774 (Zephyr's Bluetooth Mesh subnet key management leaks one PSA Crypto key ...)
-	TODO: check
+	NOT-FOR-US: Zephyr, different from src:zephyr
 CVE-2025-71401 (better-auth (npm) before 1.4.2 allows an external request to configure ...)
 	TODO: check
 CVE-2025-71400 (better-auth passkey versions before 1.4.0 contain an insecure direct o ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/162fd10ed90d2812ef7c22cf54634bd5b9e8da1f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/162fd10ed90d2812ef7c22cf54634bd5b9e8da1f
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260802/38e12023/attachment.htm>