[Git][security-tracker-team/security-tracker][master] Add some new NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6a4d6397 by Salvatore Bonaccorso at 2026-08-16T21:29:04+02:00
Add some new NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3,43 +3,43 @@ CVE-2026-74797 (OpenTofu versions before 1.11.4 contain a denial of service vuln
 CVE-2026-74796 (OpenTofu before 1.11.7 fails to validate existing symlinks in the prov ...)
 	- opentofu <itp> (bug #808940)
 CVE-2026-74795 (Scriban before 6.6.0 contains an uncontrolled recursion vulnerability  ...)
-	TODO: check
+	NOT-FOR-US: Scriban
 CVE-2026-74794 (Scriban before 6.6.0 contains an infinite recursion vulnerability in o ...)
-	TODO: check
+	NOT-FOR-US: Scriban
 CVE-2026-74792 (Scriban before 7.0.0 (affected versions <= 6.6.0) contains a stack ove ...)
-	TODO: check
+	NOT-FOR-US: Scriban
 CVE-2026-74791 (Scriban before 7.0.0 fails to clear the CachedTemplates dictionary whe ...)
-	TODO: check
+	NOT-FOR-US: Scriban
 CVE-2026-74790 (Scriban before 7.0.0 caches TypedObjectAccessor by Type only without c ...)
-	TODO: check
+	NOT-FOR-US: Scriban
 CVE-2026-74789 (Scriban before 7.0.0 (affected <= 6.6.0) applies its LoopLimit constra ...)
-	TODO: check
+	NOT-FOR-US: Scriban
 CVE-2026-74788 (Scriban before 7.0.0 (affected versions <= 6.6.0) contains an uncontro ...)
-	TODO: check
+	NOT-FOR-US: Scriban
 CVE-2026-74787 (Scriban before 7.0.0 contains an uncontrolled recursion vulnerability  ...)
-	TODO: check
+	NOT-FOR-US: Scriban
 CVE-2026-74786 (Scriban before 7.0.0 (affected versions <= 6.6.0) contains a denial-of ...)
-	TODO: check
+	NOT-FOR-US: Scriban
 CVE-2026-74785 (Scriban before 7.0.0 contains three distinct denial-of-service vulnera ...)
-	TODO: check
+	NOT-FOR-US: Scriban
 CVE-2026-74784 (Scriban before 7.2.0 contains a denial of service vulnerability in the ...)
-	TODO: check
+	NOT-FOR-US: Scriban
 CVE-2026-74783 (Scriban versions 6.6.0 through 7.2.0 contain a non-enforcing Expressio ...)
-	TODO: check
+	NOT-FOR-US: Scriban
 CVE-2026-74251 (Joomla Extension - phoca.cz -  Unauthenticated SQL injection via attri ...)
 	NOT-FOR-US: Joomla
 CVE-2026-73062 (Scriban versions 3.0.0 through 7.2.0 contain a denial of service vulne ...)
-	TODO: check
+	NOT-FOR-US: Scriban
 CVE-2026-73061 (Scriban before 7.2.2 contains an access-modifier bypass vulnerability  ...)
-	TODO: check
+	NOT-FOR-US: Scriban
 CVE-2026-73060 (Scriban versions from 3.0.0 through 7.2.5 contain a denial of service  ...)
-	TODO: check
+	NOT-FOR-US: Scriban
 CVE-2026-73059 (stoatchat before 0.15.0 contains a permission bypass vulnerability in  ...)
-	TODO: check
+	NOT-FOR-US: stoatchat
 CVE-2026-73058 (stoatchat versions before 0.15.0 fail to block the IPv6 unspecified ad ...)
-	TODO: check
+	NOT-FOR-US: stoatchat
 CVE-2026-73057 (stoatchat before 0.15.0 fails to validate SVG viewBox dimensions in th ...)
-	TODO: check
+	NOT-FOR-US: stoatchat
 CVE-2026-73056 (SiYuan kernel versions before 3.7.4 contain an improper restriction of ...)
 	NOT-FOR-US: SiYuan
 CVE-2024-58375 (OpenTofu versions 1.8.0 through 1.8.2 do not properly restrict sensiti ...)
@@ -8448,7 +8448,7 @@ CVE-2026-72554 (A broken access control vulnerability in Ladybird Web Solution F
 CVE-2026-72553 (A stored cross-site scripting vulnerability in ElkArte Forum 2.0 Beta  ...)
 	NOT-FOR-US: ElkArte Forum
 CVE-2026-72552 (A server-side request forgery vulnerability in Dub as of 2026-07-10 al ...)
-	TODO: check
+	NOT-FOR-US: Dub
 CVE-2026-72551 (A remote code execution vulnerability in Apioo Fusio 8.8.3 allows auth ...)
 	NOT-FOR-US: Apioo Fusio
 CVE-2026-72550 (An SQL injection vulnerability in Friendica through the 2026.08-dev br ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6a4d6397cebaf1ccf6e6ee414356edb39f3aa3ed

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6a4d6397cebaf1ccf6e6ee414356edb39f3aa3ed
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260816/84dd275f/attachment.htm>