[Git][security-tracker-team/security-tracker][master] NFUs

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fcfbef0c by Moritz Muehlenhoff at 2026-08-11T09:23:29+02:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -195,45 +195,45 @@ CVE-2026-19411 (A NULL pointer vulnerability has been found in the the shim appl
 CVE-2026-19391 (A flaw was found in insights-core where the password redaction layer f ...)
 	TODO: check
 CVE-2026-18982 (A flaw was found in the RHOAI training-operator. This vulnerability al ...)
-	TODO: check
+	NOT-FOR-US: Red Hat OpenShift AI
 CVE-2026-18951 (A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the t ...)
-	TODO: check
+	NOT-FOR-US: Red Hat OpenShift AI
 CVE-2026-18950 (A flaw was found in odh-dashboard. An authenticated user of the dashbo ...)
-	TODO: check
+	NOT-FOR-US: Red Hat OpenShift AI
 CVE-2026-18949 (A flaw was found in odh-dashboard. This vulnerability allows an attack ...)
-	TODO: check
+	NOT-FOR-US: Red Hat OpenShift AI
 CVE-2026-18948 (A flaw was found in Feast. The system improperly deserializes user-def ...)
-	TODO: check
+	NOT-FOR-US: Red Hat OpenShift AI
 CVE-2026-18947 (A flaw was found in Feast. An authorization bypass vulnerability exist ...)
-	TODO: check
+	NOT-FOR-US: Red Hat OpenShift AI
 CVE-2026-18942 (A flaw was found in the Feast operator. A malicious tenant could injec ...)
-	TODO: check
+	NOT-FOR-US: Red Hat OpenShift AI
 CVE-2026-18941 (A flaw was found in Feast and feast-operator. The default configuratio ...)
-	TODO: check
+	NOT-FOR-US: Red Hat OpenShift AI
 CVE-2026-18621 (A flaw was found in Data Science Pipelines (DSP). An attacker with nam ...)
-	TODO: check
+	NOT-FOR-US: Red Hat OpenShift AI
 CVE-2026-18620 (A flaw was found in Data Science Pipelines. A restricted user, or tena ...)
-	TODO: check
+	NOT-FOR-US: Red Hat OpenShift AI
 CVE-2026-18618 (A flaw was found in ml-metadata. The statically-linked gRPC stack in m ...)
-	TODO: check
+	NOT-FOR-US: Red Hat OpenShift AI
 CVE-2026-18617 (A flaw was found in the Data Science Pipelines Operator (DSPO). A name ...)
-	TODO: check
+	NOT-FOR-US: Red Hat OpenShift AI
 CVE-2026-18611 (A flaw was found in the Data Science Pipelines Operator. This vulnerab ...)
-	TODO: check
+	NOT-FOR-US: Red Hat OpenShift AI
 CVE-2026-18608 (A flaw was found in the Data Science Pipelines Operator (DSPO). The op ...)
-	TODO: check
+	NOT-FOR-US: Red Hat OpenShift AI
 CVE-2026-18348 (Missing authorization check in the upload_azure, upload_sftp, and uplo ...)
-	TODO: check
+	NOT-FOR-US: Velociraptor
 CVE-2026-16974 (The Kirki \u2013 Freeform Page Builder, Website Builder & Customizer p ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-16456 (A flaw was found in the `odh-model-controller`. An authenticated user  ...)
-	TODO: check
+	NOT-FOR-US: Red Hat OpenShift AI
 CVE-2026-16053 (Zohocorp ManageEngineM365 Manager Plus and M365 Security Plus versions ...)
 	NOT-FOR-US: Zoho
 CVE-2026-15581 (A flaw was found in the TrustyAI Service (TAS) deployment. This vulner ...)
-	TODO: check
+	NOT-FOR-US: TrustyAI
 CVE-2026-15467 (A flaw was found in the trustyai-service-operator's LMEvalJob controll ...)
-	TODO: check
+	NOT-FOR-US: TrustyAI
 CVE-2026-14886 (Vault Enterprise's identity entity batch-delete endpoint is vulnerable ...)
 	NOT-FOR-US: Hashicorp products not packaged in Debian
 CVE-2026-14549 (The Ray Enterprise Translation WordPress plugin through 1.7.3 does not ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fcfbef0ce27d24757e691e0c62615e73cfa042cb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fcfbef0ce27d24757e691e0c62615e73cfa042cb
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260811/64d7919b/attachment-0001.htm>