[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d87be333 by Salvatore Bonaccorso at 2026-08-19T08:07:28+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -193,7 +193,7 @@ CVE-2026-75627 (Bastillion fails to properly validate request URI paths in its c
 CVE-2026-75626 (SpiderFoot fails to HTML-escape correlation titles built from external ...)
 	NOT-FOR-US: SpiderFoot
 CVE-2026-75625 (Kraken agents fail to verify peer-to-peer downloaded blobs against the ...)
-	TODO: check
+	NOT-FOR-US: Kraken agents
 CVE-2026-75485 (A flaw was found in the must-gather component of Red Hat Advanced Clus ...)
 	NOT-FOR-US: Red Hat Advanced Cluster Management for Kubernetes
 CVE-2026-75130 (Context7 through 2.1.2 contains a prompt injection vulnerability that  ...)
@@ -652,11 +652,11 @@ CVE-2026-72532 (Joomla! Core - [20260806] - Improper ACL checks for category web
 CVE-2026-72531 (Joomla! Core - [20260804] - Improper ACL checks for custom fields webs ...)
 	NOT-FOR-US: Joomla
 CVE-2026-71880 (Interpretation of untrusted input in template engine in GBIF Integrate ...)
-	TODO: check
+	NOT-FOR-US: GBIF Integrated Publishing Toolkit
 CVE-2026-71879 (Missing authentication in initial setup functionality left exposed unt ...)
-	TODO: check
+	NOT-FOR-US: GBIF Integrated Publishing Toolkit
 CVE-2026-71878 (Missing authentication in initial setup functionality left exposed aft ...)
-	TODO: check
+	NOT-FOR-US: GBIF Integrated Publishing Toolkit
 CVE-2026-71574 (Joomla! Core - [20260803] - Inconsistent ACL checks for mutating webse ...)
 	NOT-FOR-US: Joomla
 CVE-2026-71573 (Joomla! Core - [20260802] - Improper CORS origin validation in Joomla  ...)
@@ -664,7 +664,7 @@ CVE-2026-71573 (Joomla! Core - [20260802] - Improper CORS origin validation in J
 CVE-2026-71572 (Joomla! Core - [20260801] - Response header injection in download view ...)
 	NOT-FOR-US: Joomla
 CVE-2026-71551 (Super Productivity is an advanced todo list app with integrated timebo ...)
-	TODO: check
+	NOT-FOR-US: Super Productivity
 CVE-2026-71539 (n8n is an open source workflow automation platform. Prior to 1.123.64, ...)
 	NOT-FOR-US: n8n
 CVE-2026-71477 (mise manages dev tools like node, python, cmake, and terraform. Prior  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d87be333d6411a9c1d5b0c3fcaaeadbe9c05a0e0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d87be333d6411a9c1d5b0c3fcaaeadbe9c05a0e0
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260819/0e34da34/attachment.htm>