[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0046ff5a by Salvatore Bonaccorso at 2026-08-22T22:12:02+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -124,21 +124,21 @@ CVE-2026-5093 (The GreenShift \u2013 Animation and Page Builder Blocks plugin fo
 CVE-2026-59809 (SiYuan before v3.8.0 interpolates secret placeholders into the destina ...)
 	NOT-FOR-US: SiYuan
 CVE-2026-59808 (AVideo through commit 9c39d8c8 contains an authentication bypass vulne ...)
-	TODO: check
+	NOT-FOR-US: WWBN AVideo
 CVE-2026-59256 (WWBN AVideo through commit 9c39d8c8 contains an authorization bypass v ...)
-	TODO: check
+	NOT-FOR-US: WWBN AVideo
 CVE-2026-58003 (WWBN AVideo through commit 9c39d8c8 contains a cross-site request forg ...)
-	TODO: check
+	NOT-FOR-US: WWBN AVideo
 CVE-2026-58002 (WWBN AVideo through commit 9c39d8c8b4c1f75540788d6b391740852ceb0732 co ...)
-	TODO: check
+	NOT-FOR-US: WWBN AVideo
 CVE-2026-58001 (WWBN AVideo through commit 9c39d8c8 contains a cross-site request forg ...)
-	TODO: check
+	NOT-FOR-US: WWBN AVideo
 CVE-2026-57998 (better-npm-audit through 3.11.0, and the 4.0.0-rc.2 prerelease, builds ...)
-	TODO: check
+	NOT-FOR-US: better-npm-audit
 CVE-2026-57944 (AVideo through commit 9c39d8c8 contains a cross-site request forgery v ...)
-	TODO: check
+	NOT-FOR-US: WWBN AVideo
 CVE-2026-56380 (AVideo through commit 9c39d8c8 contains an information exposure vulner ...)
-	TODO: check
+	NOT-FOR-US: WWBN AVideo
 CVE-2026-4703 (The WS Form LITE \u2013 Drag & Drop Contact Form Builder plugin for Wo ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-4561 (The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable  ...)
@@ -154,7 +154,7 @@ CVE-2026-3424 (The The kk Star Ratings \u2013 Rate Post & Collect User Feedbacks
 CVE-2026-2996 (The Advanced Product Fields (Product Addons) for WooCommerce plugin fo ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-12710 (A Missing Authorization vulnerability in the QueryEngineTask of Google ...)
-	TODO: check
+	NOT-FOR-US: Google Cloud
 CVE-2026-11948
 	REJECTED
 CVE-2026-11947



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0046ff5a03ad531a81bf24264c9d2e7bedb0c86d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0046ff5a03ad531a81bf24264c9d2e7bedb0c86d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260822/169b4c41/attachment.htm>