[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a454be6d by Salvatore Bonaccorso at 2026-08-05T10:19:42+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -15,9 +15,9 @@ CVE-2026-71191 (In OpenStack Swift through 2.38.0, S3API middleware does not enf
 CVE-2026-71190 (In OpenStack Swift through 2.38.0, the proxy server Accept header pars ...)
 	TODO: check
 CVE-2026-70620 (Odysseus before commit 87babb5 contains a server-side request forgery  ...)
-	TODO: check
+	NOT-FOR-US: Odysseus
 CVE-2026-70619 (Odysseus before commit bf325f6 contains a missing authorization vulner ...)
-	TODO: check
+	NOT-FOR-US: Odysseus
 CVE-2026-70594 (Ghost is a Node.js content management system. From 2.2.0 until 6.54.1, ...)
 	- ghost <itp> (bug #892150)
 CVE-2026-70593 (Ghost is a Node.js content management system. From 0.10.0 until 6.54.1 ...)
@@ -33,43 +33,43 @@ CVE-2026-70589 (Ghost is a Node.js content management system. From 4.22.0 until
 CVE-2026-70588 (Ghost is a Node.js content management system. From 5.26.0 until 6.54.1 ...)
 	- ghost <itp> (bug #892150)
 CVE-2026-70554 (MaxSite CMS contains a PHP object injection vulnerability that allows  ...)
-	TODO: check
+	NOT-FOR-US: MaxSite CMS
 CVE-2026-70553 (MaxSite CMS contains a remote code execution vulnerability that allows ...)
-	TODO: check
+	NOT-FOR-US: MaxSite CMS
 CVE-2026-70552 (MaxSite CMS 109.5 and earlier contains an authentication bypass vulner ...)
-	TODO: check
+	NOT-FOR-US: MaxSite CMS
 CVE-2026-70494 (Open WebUI is an extensible, feature-rich, and user-friendly self-host ...)
-	TODO: check
+	NOT-FOR-US: Open WebUI
 CVE-2026-70493 (Open WebUI is an extensible, feature-rich, and user-friendly self-host ...)
-	TODO: check
+	NOT-FOR-US: Open WebUI
 CVE-2026-70492 (Open WebUI is an extensible, feature-rich, and user-friendly self-host ...)
-	TODO: check
+	NOT-FOR-US: Open WebUI
 CVE-2026-70491 (Open WebUI is an extensible, feature-rich, and user-friendly self-host ...)
-	TODO: check
+	NOT-FOR-US: Open WebUI
 CVE-2026-70490 (Open WebUI is an extensible, feature-rich, and user-friendly self-host ...)
-	TODO: check
+	NOT-FOR-US: Open WebUI
 CVE-2026-70489 (Open WebUI is an extensible, feature-rich, and user-friendly self-host ...)
-	TODO: check
+	NOT-FOR-US: Open WebUI
 CVE-2026-70488 (Open WebUI is an extensible, feature-rich, and user-friendly self-host ...)
-	TODO: check
+	NOT-FOR-US: Open WebUI
 CVE-2026-70487 (Open WebUI is an extensible, feature-rich, and user-friendly self-host ...)
-	TODO: check
+	NOT-FOR-US: Open WebUI
 CVE-2026-70486 (Open WebUI is an extensible, feature-rich, and user-friendly self-host ...)
-	TODO: check
+	NOT-FOR-US: Open WebUI
 CVE-2026-70485 (Open WebUI is an extensible, feature-rich, and user-friendly self-host ...)
-	TODO: check
+	NOT-FOR-US: Open WebUI
 CVE-2026-70484 (Open WebUI is an extensible, feature-rich, and user-friendly self-host ...)
-	TODO: check
+	NOT-FOR-US: Open WebUI
 CVE-2026-70483 (Open WebUI is an extensible, feature-rich, and user-friendly self-host ...)
-	TODO: check
+	NOT-FOR-US: Open WebUI
 CVE-2026-70482 (Open WebUI is an extensible, feature-rich, and user-friendly self-host ...)
-	TODO: check
+	NOT-FOR-US: Open WebUI
 CVE-2026-70481 (Open WebUI is an extensible, feature-rich, and user-friendly self-host ...)
-	TODO: check
+	NOT-FOR-US: Open WebUI
 CVE-2026-70480 (Open WebUI is an extensible, feature-rich, and user-friendly self-host ...)
-	TODO: check
+	NOT-FOR-US: Open WebUI
 CVE-2026-70479 (Open WebUI is an extensible, feature-rich, and user-friendly self-host ...)
-	TODO: check
+	NOT-FOR-US: Open WebUI
 CVE-2026-70478 (Flowise is a drag & drop user interface to build a customized large la ...)
 	NOT-FOR-US: Flowise
 CVE-2026-70477 (Flowise is a drag & drop user interface to build a customized large la ...)
@@ -79,9 +79,9 @@ CVE-2026-70476 (Flowise is a drag & drop user interface to build a customized la
 CVE-2026-70475 (Flowise is a drag & drop user interface to build a customized large la ...)
 	NOT-FOR-US: Flowise
 CVE-2026-70375 (HashBrown CMS through 1.4.6 contains an OS Command Injection vulnerabi ...)
-	TODO: check
+	NOT-FOR-US: HashBrown CMS
 CVE-2026-70374 (HashBrown CMS through 1.4.6 contains an OS Command Injection vulnerabi ...)
-	TODO: check
+	NOT-FOR-US: HashBrown CMS
 CVE-2026-68080 (It was not possible to govern the rate at which the broker would respo ...)
 	TODO: check
 CVE-2026-68078 (It was not possible to govern the maximum number of transfer frames pe ...)
@@ -97,7 +97,7 @@ CVE-2026-68073 (A pre-authentication attacker could leverage type nesting to cau
 CVE-2026-68060 (A pre-authentication attacker could leverage type size/count handling  ...)
 	TODO: check
 CVE-2026-67979 (Incorrect access control in the Executive Services dynamic application ...)
-	TODO: check
+	NOT-FOR-US: NASA cFS
 CVE-2026-67862 (open62541 1.5.5 contains a buffer-overflow in the high-level attribute ...)
 	TODO: check
 CVE-2026-67861 (An issue in open62541 v.1.5.5 and before allows a remote attacker to c ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a454be6dc17b0a11c07d0dd2ae2ea93b1e31b21c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a454be6dc17b0a11c07d0dd2ae2ea93b1e31b21c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260805/47a3c6d5/attachment-0001.htm>