[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff (@jmm) jmm at debian.org
Wed Jan 7 08:36:17 GMT 2026



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
66579325 by Moritz Muehlenhoff at 2026-01-07T09:35:58+01:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -13,21 +13,21 @@ CVE-2026-22157
 CVE-2026-22156
 	REJECTED
 CVE-2026-21492 (iccDEV provides a set of libraries and tools that allow for the intera ...)
-	TODO: check
+	NOT-FOR-US: iccDEV
 CVE-2026-20893 (Origin validation error issue exists in Fujitsu Security Solution Auth ...)
-	TODO: check
+	NOT-FOR-US: Fujitsu
 CVE-2026-0656 (The iPaymu Payment Gateway for WooCommerce plugin for WordPress is vul ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-0650 (OpenFlagr versions prior to and including 1.1.18 contain an authentica ...)
-	TODO: check
+	NOT-FOR-US: OpenFlagr
 CVE-2026-0649 (A security vulnerability has been detected in invoiceninja up to 5.12. ...)
-	TODO: check
+	NOT-FOR-US: invoiceninja
 CVE-2026-0643 (A flaw has been found in projectworlds House Rental and Property Listi ...)
-	TODO: check
+	NOT-FOR-US: Project Worlds
 CVE-2026-0642 (A vulnerability was detected in projectworlds House Rental and Propert ...)
-	TODO: check
+	NOT-FOR-US: Project Worlds
 CVE-2025-9611 (Microsoft Playwright MCP Server versions prior to 0.0.40 fails to vali ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2025-47396 (Memory corruption occurs when a secure application is launched on a de ...)
 	NOT-FOR-US: Qualcomm
 CVE-2025-47395 (Transient DOS while parsing a WLAN management frame with a Vendor Spec ...)
@@ -83,13 +83,13 @@ CVE-2025-31642 (Improper Neutralization of Input During Web Page Generation ('Cr
 CVE-2025-31051 (Exposure of Sensitive System Information to an Unauthorized Control Sp ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-30996 (Unrestricted Upload of File with Dangerous Type vulnerability in Themi ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-30631 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-29004 (Incorrect Privilege Assignment vulnerability in AA-Team Premium Age Ve ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-15474 (AuntyFey Smart Combination Lock firmware versions as of 2025-12-24 con ...)
-	TODO: check
+	NOT-FOR-US: AuntyFey Smart Combination Lock
 CVE-2025-15472 (A flaw has been found in TRENDnet TEW-811DRU 1.0.2.0. This affects the ...)
 	NOT-FOR-US: TRENDnet
 CVE-2025-15471 (A vulnerability was detected in TRENDnet TEW-713RE 1.02. The impacted  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/66579325f6b946d8e04686879fa1e0e1e9bbc2e2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/66579325f6b946d8e04686879fa1e0e1e9bbc2e2
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260107/4d00299e/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list