[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5fca9fc7 by Salvatore Bonaccorso at 2026-08-26T22:11:12+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -359,39 +359,39 @@ CVE-2026-80519 (In the Linux kernel, the following vulnerability has been resolv
 	[bullseye] - linux <not-affected> (Vulnerable code not present)
 	NOTE: https://git.kernel.org/linus/9e163917a86c6adfbe150e13f4c73653a54616de (7.2)
 CVE-2026-80428 (ILIAS deserialises stored session data for an unauthenticated caller.  ...)
-	TODO: check
+	NOT-FOR-US: ILIAS
 CVE-2026-80427 (bestzip builds the argument list for the system zip utility without se ...)
-	TODO: check
+	NOT-FOR-US: bestzip Node.js module
 CVE-2026-80426 (FiftyOne renders a dataset field's description as markup. The sidebar  ...)
-	TODO: check
+	NOT-FOR-US: FiftyOne
 CVE-2026-80350 (OneUptime's webhook target check rejects private and loopback addresse ...)
-	TODO: check
+	NOT-FOR-US: OneUptime
 CVE-2026-80349 (TarsWeb decides whether a request comes from a trusted local caller us ...)
-	TODO: check
+	NOT-FOR-US: TarsWeb
 CVE-2026-80348 (TarsWeb enforces its per-application roles by calling AuthService from ...)
-	TODO: check
+	NOT-FOR-US: TarsWeb
 CVE-2026-80347 (mcp-fetch checks a fetch target against its SSRF guard without removin ...)
-	TODO: check
+	NOT-FOR-US: mcp-fetch
 CVE-2026-80346 (StarRocks performs no privilege check when a legacy synchronous materi ...)
-	TODO: check
+	NOT-FOR-US: StarRocks
 CVE-2026-80237 (EFence developed by Thinking Software Technology has an Arbitrary File ...)
-	TODO: check
+	NOT-FOR-US: EFence
 CVE-2026-80236 (Efence developed by Thinking Software Technology has a SQL Injection v ...)
-	TODO: check
+	NOT-FOR-US: EFence
 CVE-2026-80235 (EFence developed by Thinking Software Technology has an Arbitrary File ...)
-	TODO: check
+	NOT-FOR-US: EFence
 CVE-2026-80234 (CAYIN CMS-WS and CMS-SE developed by CAYIN Technology have a Missing A ...)
-	TODO: check
+	NOT-FOR-US: CAYIN CMS-WS and CMS-SE
 CVE-2026-80233 (CAYIN CMS-WS, CMS-SE, and SMP series products developed by CAYIN Techn ...)
-	TODO: check
+	NOT-FOR-US: CAYIN CMS-WS and CMS-SE and SMP series products
 CVE-2026-80206 (NLTK before 3.10.3 contains a regular expression denial of service (Re ...)
 	TODO: check
 CVE-2026-80205 (NLTK versions before 3.10.0 contain a regular expression denial of ser ...)
 	TODO: check
 CVE-2026-80204 (The Grav API plugin (getgrav/grav-plugin-api) before 1.0.18 does not a ...)
-	TODO: check
+	NOT-FOR-US: Grav plugin
 CVE-2026-80203 (The getgrav/grav-plugin-api plugin before 1.0.18 does not enforce API- ...)
-	TODO: check
+	NOT-FOR-US: Grav plugin
 CVE-2026-80153
 	REJECTED
 CVE-2026-7487 (GitLab has remediated an issue in GitLab EE affecting all versions fro ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5fca9fc7caa92e07fc4aff7f793092accc9c57c7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5fca9fc7caa92e07fc4aff7f793092accc9c57c7
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260826/4f0a1615/attachment.htm>