[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0c277f64 by Salvatore Bonaccorso at 2026-08-31T21:26:48+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,63 +1,63 @@
 CVE-2026-83497 (Unrestricted deserialization of untrusted data in the cursor paginatio ...)
 	NOT-FOR-US: Amazon
 CVE-2026-83492 (Improper input validation vulnerability in Extend Themes Kubio AI Webs ...)
-	TODO: check
+	NOT-FOR-US: Kubio AI Website Builder
 CVE-2026-82970 (Unrestricted Upload of File with Dangerous Type vulnerability in WP Le ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-82881 (Aix-DB through 1.2.4 renders markdown with raw HTML enabled into v-htm ...)
-	TODO: check
+	NOT-FOR-US: Aix-DB
 CVE-2026-82880 (YaCy Search Server through 1.941 contains an XML external entity injec ...)
-	TODO: check
+	NOT-FOR-US: YaCy Search Server
 CVE-2026-82879 (DataEase before 2.10.26 contains multiple access control defects in th ...)
 	NOT-FOR-US: DataEase
 CVE-2026-82878 (DataEase versions before 2.10.26 omit object-level authorization check ...)
 	NOT-FOR-US: DataEase
 CVE-2026-82877 (ILIAS versions before 9.22, 10.0 through 10.9, and 11.0 through 11.2 c ...)
-	TODO: check
+	NOT-FOR-US: ILIAS
 CVE-2026-82876 (Phison PS3111-S11 controller firmware verifies RSA signatures using a  ...)
-	TODO: check
+	NOT-FOR-US: Phison PS3111-S11 controller firmware
 CVE-2026-82875 (ToolJet before v3.16.208 contains an authorization bypass vulnerabilit ...)
-	TODO: check
+	NOT-FOR-US: ToolJet
 CVE-2026-82874 (ToolJet before v3.16.208 fails to validate that authenticated users be ...)
-	TODO: check
+	NOT-FOR-US: ToolJet
 CVE-2026-82873 (ToolJet through 3.0.0-ee-beta.2 contains authorization bypass vulnerab ...)
-	TODO: check
+	NOT-FOR-US: ToolJet
 CVE-2026-82872 (ToolJet before v3.16.208 fails to validate that the path organizationI ...)
-	TODO: check
+	NOT-FOR-US: ToolJet
 CVE-2026-82871 (ToolJet before v3.16.208 fails to validate organization membership in  ...)
-	TODO: check
+	NOT-FOR-US: ToolJet
 CVE-2026-82870 (ToolJet before v3.16.208 fails to validate organizationId ownership in ...)
-	TODO: check
+	NOT-FOR-US: ToolJet
 CVE-2026-82869 (ToolJet Database versions before v3.16.44 contain a privilege escalati ...)
-	TODO: check
+	NOT-FOR-US: ToolJet
 CVE-2026-82868 (@pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: pdfme/schemas
 CVE-2026-82867 (@pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: pdfme/schemas
 CVE-2026-82866 (@pdfme/common before 5.5.10 contains a server-side request forgery vul ...)
-	TODO: check
+	NOT-FOR-US: pdfme/common
 CVE-2026-82865 (pdfme schemas before 5.5.10 contains a cross-site scripting vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: pdfme/schemas
 CVE-2026-82864 (pdfme pdf-lib versions before 5.5.10 contain an unbounded buffer growt ...)
-	TODO: check
+	NOT-FOR-US: pdfme/pdf-lib
 CVE-2026-82863 (@hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail ...)
-	TODO: check
+	NOT-FOR-US: hulumi/baseline
 CVE-2026-82862 (Hulumi versions before v1.3.2 resolve the threat-model helper script f ...)
-	TODO: check
+	NOT-FOR-US: Hulumi
 CVE-2026-82861 (@hulumi/policies versions before 1.3.2 contain a parent spoof bypass v ...)
-	TODO: check
+	NOT-FOR-US: Hulumi
 CVE-2026-82860 (@hulumi/policies versions before 1.3.2 fail to fully inspect inline an ...)
-	TODO: check
+	NOT-FOR-US: Hulumi
 CVE-2026-82859 (hulumi versions before v1.3.2 contain a deployment SCP template that a ...)
-	TODO: check
+	NOT-FOR-US: Hulumi
 CVE-2026-82858 (@hulumi/drift versions before 1.3.2 accept externally supplied execute ...)
-	TODO: check
+	NOT-FOR-US: Hulumi
 CVE-2026-82857 (hulumi versions before v1.3.2 contain a privilege escalation vulnerabi ...)
-	TODO: check
+	NOT-FOR-US: Hulumi
 CVE-2026-82856 (@hulumi/policies versions before 1.3.2 fail to properly validate set-q ...)
-	TODO: check
+	NOT-FOR-US: Hulumi
 CVE-2026-82855 (@hulumi/policies versions before 1.3.2 contain an evidence validation  ...)
-	TODO: check
+	NOT-FOR-US: Hulumi
 CVE-2026-82854 (Nodemailer before 8.0.4 is vulnerable to SMTP command injection throug ...)
 	TODO: check
 CVE-2026-82853 (Nodemailer versions before 8.0.5 contain an SMTP command injection vul ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0c277f64f3f99fa84f3c68a04c975c48a7c48e3a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0c277f64f3f99fa84f3c68a04c975c48a7c48e3a
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260831/ef714969/attachment.htm>