[Git][security-tracker-team/security-tracker][master] Associate some NFUs with itp'ed entry

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ba62d650 by Salvatore Bonaccorso at 2026-02-26T14:17:54+01:00
Associate some NFUs with itp'ed entry

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -49918,7 +49918,7 @@ CVE-2025-62598 (WeGIA is an open source Web Manager for Institutions with a focu
 CVE-2025-62597 (WeGIA is an open source Web Manager for Institutions with a focus on P ...)
 	NOT-FOR-US: WeGIA
 CVE-2025-62595 (Koa is expressive middleware for Node.js using ES2017 async functions. ...)
-	NOT-FOR-US: Koa
+	- node-koa <itp> (bug #901972)
 CVE-2025-62592 (Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza ...)
 	- virtualbox 7.2.4-dfsg-1 (bug #1118542)
 CVE-2025-62591 (Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza ...)
@@ -113899,7 +113899,7 @@ CVE-2025-32381 (XGrammar is an open-source library for efficient, flexible, and
 CVE-2025-32380 (The Apollo Router Core is a configurable, high-performance graph route ...)
 	NOT-FOR-US: Apollo Router Core
 CVE-2025-32379 (Koa is expressive middleware for Node.js using ES2017 async functions. ...)
-	NOT-FOR-US: Koa
+	- node-koa <itp> (bug #901972)
 CVE-2025-32378 (Shopware is an open source e-commerce software platform. Prior to 6.6. ...)
 	NOT-FOR-US: Shopware
 CVE-2025-32375 (BentoML is a Python library for building online serving systems optimi ...)
@@ -134683,7 +134683,7 @@ CVE-2025-25205 (Audiobookshelf is a self-hosted audiobook and podcast server. St
 CVE-2025-25201 (Nitrokey 3 Firmware is the the firmware of Nitrokey 3 USB keys. For re ...)
 	NOT-FOR-US: Nitrokey 3 Firmware
 CVE-2025-25200 (Koa is expressive middleware for Node.js using ES2017 async functions. ...)
-	NOT-FOR-US: Koa
+	- node-koa <itp> (bug #901972)
 CVE-2025-25199 (go-crypto-winnative Go crypto backend for Windows using Cryptography A ...)
 	NOT-FOR-US: go-crypto-winnative
 CVE-2025-25198 (mailcow: dockerized is an open source groupware/email suite based on d ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ba62d650a47f52f9eb4d0db392e2200c7d0cb823

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ba62d650a47f52f9eb4d0db392e2200c7d0cb823
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260226/27721d06/attachment.htm>