[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d60b1be6 by Salvatore Bonaccorso at 2026-07-02T21:58:04+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -32,7 +32,7 @@ CVE-2026-9145 (The Database for Contact Form 7, WPforms, Elementor forms plugin
 CVE-2026-8699 (A stored Cross-Site Scripting (XSS) vulnerability has been identified  ...)
 	NOT-FOR-US: TPLink
 CVE-2026-8482 (A vulnerability was discovered on StormShield Network Security 4.3.0 t ...)
-	TODO: check
+	NOT-FOR-US: StormShield
 CVE-2026-8441 (The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Inj ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-8147 (In MLflow versions prior to 3.14.0, when running with authentication e ...)
@@ -44,13 +44,13 @@ CVE-2026-7311 (The TinyPNG \u2013 JPEG, PNG & WebP image compression plugin for
 CVE-2026-5524 (The Divi Form Builder plugin for WordPress is vulnerable to Arbitrary  ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-58653 (PraisonAI before 0.1.7 fails to validate that project_id in issue crea ...)
-	TODO: check
+	NOT-FOR-US: PraisonAI
 CVE-2026-58652 (luci-app-travelmate (and the travelmate package) contain a privilege-e ...)
-	TODO: check
+	NOT-FOR-US: luci-app-travelmate
 CVE-2026-58465 (Eclipse Wakaama before snapshot/2026-05-26 contains an unbounded memor ...)
 	TODO: check
 CVE-2026-58455 (Dockwatch through 0.6.567 contains an unauthenticated OS command injec ...)
-	TODO: check
+	NOT-FOR-US: Dockwatch
 CVE-2026-57766 (Unauthenticated Cross Site Request Forgery (CSRF) in WPIDE \u2013 File ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-57765 (Contributor SQL Injection in WP EasyCart <= 5.9.0 versions.)
@@ -192,9 +192,9 @@ CVE-2026-57343 (Unauthenticated Cross Site Scripting (XSS) in Real Estate 7 <= 3
 CVE-2026-57342 (Subscriber Cross Site Scripting (XSS) in ShortPixel Adaptive Images <= ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-56842 (A malicious actor with access to the network and under certain conditi ...)
-	TODO: check
+	NOT-FOR-US: UniFi
 CVE-2026-56841 (A malicious actor with access to the network and low privileges could  ...)
-	TODO: check
+	NOT-FOR-US: UniFi
 CVE-2026-56037 (Deserialization of Untrusted Data vulnerability in Themify Themify Pop ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-56004 (A shellcode injection in the mercurial handler of the obs tar_scm sour ...)
@@ -204,25 +204,25 @@ CVE-2026-55952 (The Erlang/OTP ssl application does not validate that the PSK id
 CVE-2026-55950 (Time-of-check Time-of-use (TOCTOU) race condition vulnerability in Erl ...)
 	TODO: check
 CVE-2026-55119 (A malicious actor with access to the network and low privileges could  ...)
-	TODO: check
+	NOT-FOR-US: UniFi
 CVE-2026-55118 (A malicious actor with access to the network,low privileges and under  ...)
-	TODO: check
+	NOT-FOR-US: UniFi
 CVE-2026-55117 (A malicious actor with access to the network could exploit a Path Trav ...)
-	TODO: check
+	NOT-FOR-US: UniFi
 CVE-2026-55116 (A malicious actor with access to the network and under certain network ...)
-	TODO: check
+	NOT-FOR-US: UniFi
 CVE-2026-55115 (A malicious actor with access to the network and low privileges could  ...)
-	TODO: check
+	NOT-FOR-US: UniFi
 CVE-2026-55114 (A malicious actor with access to the network and low privileges could  ...)
-	TODO: check
+	NOT-FOR-US: UniFi
 CVE-2026-55113 (A malicious actor with access to the network could exploit a Server-Si ...)
-	TODO: check
+	NOT-FOR-US: UniFi
 CVE-2026-55112 (A malicious actor with access to the network and low privileges and un ...)
-	TODO: check
+	NOT-FOR-US: UniFi
 CVE-2026-55111 (A malicious actor with access to the network could exploit a Path Trav ...)
-	TODO: check
+	NOT-FOR-US: UniFi
 CVE-2026-55110 (A malicious actor who lures an authenticated user to a malicious page  ...)
-	TODO: check
+	NOT-FOR-US: UniFi
 CVE-2026-54891 (Improper Enforcement of Message Integrity During Transmission in a Com ...)
 	TODO: check
 CVE-2026-54887 (Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl (DTLS ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d60b1be6ced5a0a12aa78b473c92b68069118495

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d60b1be6ced5a0a12aa78b473c92b68069118495
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260702/9dc27a4f/attachment.htm>