[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6848bdbf by Salvatore Bonaccorso at 2026-08-13T08:25:58+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1304,7 +1304,7 @@ CVE-2026-72553 (A stored cross-site scripting vulnerability in ElkArte Forum 2.0
 CVE-2026-72552 (A server-side request forgery vulnerability in Dub as of 2026-07-10 al ...)
 	TODO: check
 CVE-2026-72551 (A remote code execution vulnerability in Apioo Fusio 8.8.3 allows auth ...)
-	TODO: check
+	NOT-FOR-US: Apioo Fusio
 CVE-2026-72550 (An SQL injection vulnerability in Friendica through the 2026.08-dev br ...)
 	NOT-FOR-US: Friendica
 CVE-2026-72549 (An information disclosure vulnerability in OpenSignLabs OpenSign throu ...)
@@ -1312,9 +1312,9 @@ CVE-2026-72549 (An information disclosure vulnerability in OpenSignLabs OpenSign
 CVE-2026-72548 (An information disclosure vulnerability in OpenSignLabs OpenSign throu ...)
 	NOT-FOR-US: OpenSignLabs OpenSign
 CVE-2026-72547 (An insecure direct object reference vulnerability in Attendize through ...)
-	TODO: check
+	NOT-FOR-US: Attendize
 CVE-2026-72546 (An insecure direct object reference vulnerability in Attendize through ...)
-	TODO: check
+	NOT-FOR-US: Attendize
 CVE-2026-72545 (An insecure direct object reference vulnerability in OpenSignLabs Open ...)
 	NOT-FOR-US: OpenSignLabs OpenSign
 CVE-2026-72544 (An integrity verification vulnerability in OpenSignLabs OpenSign throu ...)
@@ -1330,13 +1330,13 @@ CVE-2026-72540 (An insecure direct object reference vulnerability in PhotoPrism
 CVE-2026-72539 (An information disclosure vulnerability in Windmill Labs Windmill thro ...)
 	NOT-FOR-US: Windmill
 CVE-2026-72538 (An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 ...)
-	TODO: check
+	NOT-FOR-US: PrefectHQ Prefect
 CVE-2026-72537 (A privilege escalation vulnerability in Authentik Security authentik t ...)
 	NOT-FOR-US: authentik
 CVE-2026-72536 (A missing authentication vulnerability in Chaskiq through commit 46dfd ...)
-	TODO: check
+	NOT-FOR-US: chaskiq
 CVE-2026-72535 (A missing authentication vulnerability in Chaskiq through commit 46dfd ...)
-	TODO: check
+	NOT-FOR-US: chaskiq
 CVE-2026-72534 (A privilege escalation vulnerability in Authentik Security authentik t ...)
 	NOT-FOR-US: authentik
 CVE-2026-72533 (An authentication bypass vulnerability in Portainer CE through 2.44.0  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6848bdbf769eb0b5d67e2365599c150ff30f5f9d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6848bdbf769eb0b5d67e2365599c150ff30f5f9d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260813/72bc1e79/attachment.htm>