[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
333b6327 by Salvatore Bonaccorso at 2026-07-12T21:23:12+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,33 +1,33 @@
 CVE-2026-61876 (LuCI versions fail to properly encode DHCPv6 lease hostnames before re ...)
-	TODO: check
+	NOT-FOR-US: LuCI
 CVE-2026-61875 (luci-app-upnp contains a stored cross-site scripting vulnerability tha ...)
-	TODO: check
+	NOT-FOR-US: luci-app-upnp
 CVE-2026-61874 (filebrowser versions before 2.63.17 fail to normalize paths before que ...)
-	TODO: check
+	NOT-FOR-US: filebrowser
 CVE-2026-59260 (OpenWrt luci-app-samba4 read ACL grants file.exec permission on /usr/s ...)
-	TODO: check
+	NOT-FOR-US: OpenWRT luci-app-samba4
 CVE-2026-58596 (Untrusted pointer dereference in Microsoft Edge (Chromium-based) allow ...)
 	NOT-FOR-US: Microsoft
 CVE-2026-56336 (Capgo before 12.128.2 contains an information disclosure vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Cap-go
 CVE-2026-56313 (Capgo before 12.128.2 contains a cross-organization account disruption ...)
-	TODO: check
+	NOT-FOR-US: Cap-go
 CVE-2026-56308 (Capgo before 12.128.2 allows email address changes without requiring c ...)
-	TODO: check
+	NOT-FOR-US: Cap-go
 CVE-2026-56281 (Capgo before 12.128.2 contains a sql injection vulnerability in the PO ...)
-	TODO: check
+	NOT-FOR-US: Cap-go
 CVE-2026-56271 (Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses weak  ...)
 	NOT-FOR-US: Flowise
 CVE-2026-56260 (Crawl4AI before 0.8.7 contains an arbitrary file write vulnerability i ...)
-	TODO: check
+	NOT-FOR-US: Crawl4AI
 CVE-2026-56259 (Crawl4AI before 0.8.8 contains credential exfiltration vulnerabilities ...)
-	TODO: check
+	NOT-FOR-US: Crawl4AI
 CVE-2026-56252 (Capgo before 12.128.2 contains a scope isolation vulnerability in the  ...)
-	TODO: check
+	NOT-FOR-US: Cap-go
 CVE-2026-56241 (Capgo before 12.128.2 contains a privilege escalation vulnerability wh ...)
-	TODO: check
+	NOT-FOR-US: Cap-go
 CVE-2026-56238 (Capgo before 12.128.2 contains an information disclosure vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Cap-go
 CVE-2026-15502 (A vulnerability was detected in AojiaoZero Antaris 1.0. This affects t ...)
 	TODO: check
 CVE-2026-15501 (A security vulnerability has been detected in AstrBotDevs AstrBot up t ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/333b6327702fa215ec5eece0f434b98faff53362

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/333b6327702fa215ec5eece0f434b98faff53362
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260712/743d52b1/attachment.htm>