[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f4b2b243 by Salvatore Bonaccorso at 2026-07-13T23:10:39+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -90,11 +90,11 @@ CVE-2026-59516 (Improper Neutralization of Input During Web Page Generation ('Cr
 CVE-2026-59515 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-59245 (In the Apache Airflow FAB auth manager, a DAG whose `dag_id` is `DAGs` ...)
-	TODO: check
+	NOT-FOR-US: Apache Airflow FAB auth manager
 CVE-2026-58228 (Cross-site scripting vulnerability in phoenixframework phoenix_live_vi ...)
-	TODO: check
+	NOT-FOR-US: phoenixframework phoenix_live_view
 CVE-2026-58065 (The Apache Airflow Git provider runs its git-over-SSH operations with  ...)
-	TODO: check
+	NOT-FOR-US: Apache Airflow Git provider
 CVE-2026-57830 (The Joomla extension Helix Ultimate is vulnerable to an unauthenticate ...)
 	NOT-FOR-US: Joomla
 CVE-2026-57829 (The Joomla extension Helix Ultimate is vulnerable to an unauthenticate ...)
@@ -374,7 +374,7 @@ CVE-2026-57364 (Improper Validation of Specified Quantity in Input vulnerability
 CVE-2026-57363 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-55772 (CedarJava is an open source Java implementation of the Cedar policy la ...)
-	TODO: check
+	NOT-FOR-US: CedarJava
 CVE-2026-53365 (In the Linux kernel, the following vulnerability has been resolved:  v ...)
 	- linux 7.0.12-1
 	[bookworm] - linux <not-affected> (Vulnerable code not present)
@@ -387,17 +387,17 @@ CVE-2026-53364 (In the Linux kernel, the following vulnerability has been resolv
 	[bullseye] - linux <not-affected> (Vulnerable code not present)
 	NOTE: https://git.kernel.org/linus/bfa9d28960ed677d556bdf097073bc3129686229 (7.1-rc6)
 CVE-2026-4769 (Certain devices in the WAGO System I/O Field series activate an intern ...)
-	TODO: check
+	NOT-FOR-US: WAGO
 CVE-2026-4765 (Stored Cross-Site Scripting (XSS) vulnerability in the RD Station Conv ...)
-	TODO: check
+	NOT-FOR-US: RD Station Conversas chat
 CVE-2026-49972 (Laravel-Mediable before 7.0.0 contains a file upload vulnerability tha ...)
-	TODO: check
+	NOT-FOR-US: Laravel-Mediable
 CVE-2026-49971 (Laravel-Mediable before 7.0.0 contains a stored cross-site scripting v ...)
-	TODO: check
+	NOT-FOR-US: Laravel-Mediable
 CVE-2026-49970 (Laravel-Mediable before 7.0.0 contains a path traversal vulnerability  ...)
-	TODO: check
+	NOT-FOR-US: Laravel-Mediable
 CVE-2026-49969 (Laravel-Mediable before 7.0.0 contains a server-side request forgery v ...)
-	TODO: check
+	NOT-FOR-US: Laravel-Mediable
 CVE-2026-49876 (Authenticated SSRF in Gravitino JobManager allows server-side HTTP req ...)
 	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-41041 (URL path injection via unencoded user-supplied identifiers vulnerabili ...)
@@ -5372,7 +5372,7 @@ CVE-2026-58653 (PraisonAI before 0.1.7 fails to validate that project_id in issu
 CVE-2026-58652 (luci-app-travelmate (and the travelmate package) contain a privilege-e ...)
 	NOT-FOR-US: luci-app-travelmate
 CVE-2026-58465 (Eclipse Wakaama before snapshot/2026-05-26 contains an unbounded memor ...)
-	TODO: check
+	NOT-FOR-US: Eclipse Wakaama
 CVE-2026-58455 (Dockwatch through 0.6.567 contains an unauthenticated OS command injec ...)
 	NOT-FOR-US: Dockwatch
 CVE-2026-57766 (Unauthenticated Cross Site Request Forgery (CSRF) in WPIDE \u2013 File ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f4b2b243d94dff51ad3984f7f536657efb4187a7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f4b2b243d94dff51ad3984f7f536657efb4187a7
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260713/91e7f462/attachment.htm>