[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c5084f76 by security tracker role at 2026-08-30T07:14:02+00:00
automatic NOT-FOR-US entries update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -9,21 +9,21 @@ CVE-2026-82479 (A vulnerability was identified in NASA cFS up to 7.0.1. Impacted
 CVE-2026-82478 (A vulnerability was determined in NASA Trick 19.6.0. This issue affect ...)
 	TODO: check
 CVE-2026-82424 (A weakness has been identified in PHPGurukul Student Information Syste ...)
-	TODO: check
+	NOT-FOR-US: PHPGurukul
 CVE-2026-82423 (A vulnerability has been found in macrozheng mall up to 1.0.3. The aff ...)
 	TODO: check
 CVE-2026-82422 (A security flaw has been discovered in itsourcecode Sales and Inventor ...)
-	TODO: check
+	NOT-FOR-US: itsourcecode System
 CVE-2026-82421 (A vulnerability was identified in itsourcecode Sales and Inventory Sys ...)
-	TODO: check
+	NOT-FOR-US: itsourcecode System
 CVE-2026-82417 (### Summary    `qs.stringify` throws a `TypeError` when it serializes  ...)
 	TODO: check
 CVE-2026-81766 (The Really Simple Security  WordPress plugin before 9.8.0 does not che ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-81660 (The Groundhogg \u2014 CRM, Newsletters, and Marketing Automation WordP ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-78364 (The MW WP Form WordPress plugin before 5.1.6 does not sanitise and esc ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-77970 (Cleartext Storage of Sensitive Information vulnerability in ash-projec ...)
 	TODO: check
 CVE-2026-77846 (Improper Neutralization of Special Elements in Data Query Logic vulner ...)
@@ -31,21 +31,21 @@ CVE-2026-77846 (Improper Neutralization of Special Elements in Data Query Logic
 CVE-2026-77831 (Inefficient Algorithmic Complexity vulnerability in ash-project ash_pa ...)
 	TODO: check
 CVE-2026-76585 (The Customer Reviews for WooCommerce WordPress plugin before 5.118.0 d ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-75847 (Cleartext Storage of Sensitive Information vulnerability in ash-projec ...)
 	TODO: check
 CVE-2026-75759 (Improper Verification of Cryptographic Signature vulnerability in erle ...)
 	TODO: check
 CVE-2026-19722 (The WPvivid \u2014 Backup, Migration & Staging WordPress plugin before ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-15980 (The MyHome Core plugin for WordPress is vulnerable to Authentication B ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-15369 (The Custom User Registration Fields for WooCommerce plugin for WordPre ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-14835 (The SOGO Add Script to Individual Pages Header Footer WordPress plugin ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-14307 (The geotargetingwp WordPress plugin before 3.5.6.2 does not sanitise o ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-82481 (The cohttp package before 6.3.0 for OCaml allows directory traversal.)
 	- ocaml-cohttp <unfixed>
 	NOTE: https://github.com/mirage/ocaml-cohttp/pull/1145 (6.3.0)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c5084f76fcee68f237471e76852e39ed19054eb2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c5084f76fcee68f237471e76852e39ed19054eb2
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260830/63703671/attachment-0001.htm>