[Git][security-tracker-team/security-tracker][master] Process some NFUs

Tue Jan 13 08:29:56 GMT 2026


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a661f125 by Salvatore Bonaccorso at 2026-01-13T09:29:27+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -17,33 +17,33 @@ CVE-2026-22830
 CVE-2026-22829
 	REJECTED
 CVE-2026-22813 (OpenCode is an open source AI coding agent. The markdown renderer used ...)
-	TODO: check
+	NOT-FOR-US: OpenCode
 CVE-2026-22812 (OpenCode is an open source AI coding agent. Prior to 1.0.216, OpenCode ...)
-	TODO: check
+	NOT-FOR-US: OpenCode
 CVE-2026-22805 (Metabase is an open-source data analytics platform. Prior to 55.13, 56 ...)
-	TODO: check
+	NOT-FOR-US: Metabase
 CVE-2026-22804 (Termix is a web-based server management platform with SSH terminal, tu ...)
-	TODO: check
+	NOT-FOR-US: Termix
 CVE-2026-22800 (PILOS (Platform for Interactive Live-Online Seminars) is a frontend fo ...)
-	TODO: check
+	NOT-FOR-US: PILOS (Platform for Interactive Live-Online Seminars)
 CVE-2026-22799 (Emlog is an open source website building system. emlog v2.6.1 and earl ...)
-	TODO: check
+	NOT-FOR-US: Emlog
 CVE-2026-22798 (hermes is an implementation of the HERMES workflow to automatize softw ...)
 	TODO: check
 CVE-2026-22794 (Appsmith is a platform to build admin panels, internal tools, and dash ...)
-	TODO: check
+	NOT-FOR-US: Appsmith
 CVE-2026-22789 (WebErpMesv2 is a Resource Management and Manufacturing execution syste ...)
-	TODO: check
+	NOT-FOR-US: WebErpMesv2
 CVE-2026-22788 (WebErpMesv2 is a Resource Management and Manufacturing execution syste ...)
-	TODO: check
+	NOT-FOR-US: WebErpMesv2
 CVE-2026-22786 (Gin-vue-admin is a backstage management system based on vue and gin. G ...)
-	TODO: check
+	NOT-FOR-US: Gin-vue-admin
 CVE-2026-22772 (Fulcio is a certificate authority for issuing code signing certificate ...)
 	TODO: check
 CVE-2026-22214 (RIOT OS versions up to and including 2026.01-devel-317 contain a stack ...)
-	TODO: check
+	NOT-FOR-US: RIOT OS
 CVE-2026-22213 (RIOT OS versions up to and including 2026.01-devel-317 contain a stack ...)
-	TODO: check
+	NOT-FOR-US: RIOT OS
 CVE-2026-22212 (TinyOS versions up to and including 2.1.2 contain a stack-based buffer ...)
 	TODO: check
 CVE-2026-0514 (Due to a Cross-Site Scripting (XSS) vulnerability in SAP Business Conn ...)
@@ -93,7 +93,7 @@ CVE-2025-66177 (There is a Stack overflow Vulnerability in the device Search and
 CVE-2025-66176 (There is a Stack overflow Vulnerability in the device Search and Disco ...)
 	NOT-FOR-US: Hikvision
 CVE-2025-41717 (An unauthenticated remote attacker can trick a high privileged user in ...)
-	TODO: check
+	NOT-FOR-US: Phoenix Contact
 CVE-2025-29329 (Buffer Overflow in the ippprint (Internet Printing Protocol) service i ...)
 	TODO: check
 CVE-2025-15514 (Ollama 0.11.5-rc0 through current version 0.13.5 contain a null pointe ...)
@@ -105,11 +105,11 @@ CVE-2025-12420 (A vulnerability has been identified in the ServiceNow AI Platfor
 CVE-2025-10915 (The Dreamer Blog WordPress theme through 1.2 is vulnerable to arbitrar ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2024-58340 (LangChain versions up to and including 0.3.1 contain a regular express ...)
-	TODO: check
+	NOT-FOR-US: LangChain
 CVE-2024-58339 (LlamaIndex (run-llama/llama_index) versions up to and including 0.12.2 ...)
-	TODO: check
+	NOT-FOR-US: LlamaIndex (run-llama/llama_index)
 CVE-2024-14021 (LlamaIndex (run-llama/llama_index) versions up to and including 0.11.6 ...)
-	TODO: check
+	NOT-FOR-US: LlamaIndex (run-llama/llama_index)
 CVE-2026-22801 (LIBPNG is a reference library for use in applications that read, creat ...)
 	- libpng1.6 <unfixed>
 	NOTE: https://github.com/pnggroup/libpng/security/advisories/GHSA-vgjq-8cw5-ggw8
@@ -393264,7 +393264,7 @@ CVE-2021-41076
 CVE-2021-41075 (The NetFlow Analyzer in Zoho ManageEngine OpManger before 125455 is vu ...)
 	NOT-FOR-US: Zoho ManageEngine
 CVE-2021-41074 (A CSRF issue in index.php in QloApps hotel eCommerce 1.5.1 allows an a ...)
-	TODO: check
+	NOT-FOR-US: QloApps hotel eCommerce
 CVE-2021-41073 (loop_rw_iter in fs/io_uring.c in the Linux kernel 5.10 through 5.14.6  ...)
 	{DSA-4978-1}
 	- linux 5.14.6-2



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a661f125e79177a2d70352002e6e8bb36b3a2bcf

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a661f125e79177a2d70352002e6e8bb36b3a2bcf
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260113/f24502fc/attachment.htm>
