[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
17313104 by Salvatore Bonaccorso at 2026-08-18T21:52:58+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -9,21 +9,21 @@ CVE-2026-75926 (Hugo 0.161.0 placed the Node asset pipelines behind the Node.js
 	NOTE: Fixed by: https://github.com/gohugoio/hugo/commit/8a55df7af2e6da31297245cc54fa2e3b521d93e8 (v0.165.0)
 	TODO: double check introducing commit, as CVE entry claims only starting 0.162.0
 CVE-2026-75924 (A flaw was found in managed-serviceaccount. A compromised addon-manage ...)
-	TODO: check
+	NOT-FOR-US: Red Hat Multicluster Engine for Kubernetes
 CVE-2026-75915 (CodeWhale versions before 0.8.64 contain an environment variable expos ...)
-	TODO: check
+	NOT-FOR-US: CodeWhale
 CVE-2026-75914 (CodeWhale versions before 0.8.64 contain a path traversal vulnerabilit ...)
-	TODO: check
+	NOT-FOR-US: CodeWhale
 CVE-2026-75913 (CodeWhale (codewhale / codewhale-tui) versions >= 0.8.41 and < 0.8.64  ...)
-	TODO: check
+	NOT-FOR-US: CodeWhale
 CVE-2026-75912 (CodeWhale versions before 0.8.64 contain an argument injection vulnera ...)
-	TODO: check
+	NOT-FOR-US: CodeWhale
 CVE-2026-75911 (CodeWhale versions before 0.8.64 fail to properly validate the allow_s ...)
-	TODO: check
+	NOT-FOR-US: CodeWhale
 CVE-2026-75904 (libmodplug through 0.8.9.1 contains an out-of-bounds read in pat_smplo ...)
 	TODO: check
 CVE-2026-75898 (RAGFlow before 0.26.3 contains a server-side request forgery vulnerabi ...)
-	TODO: check
+	NOT-FOR-US: RAGFlow
 CVE-2026-75897 (Improper input validation in the capabilities route handler in OpenSea ...)
 	NOT-FOR-US: Amazon
 CVE-2026-75890



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/17313104a75e3a005b8c0955b89d802691c58da8

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/17313104a75e3a005b8c0955b89d802691c58da8
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260818/80b4ba68/attachment-0001.htm>