[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a5382b34 by Salvatore Bonaccorso at 2026-07-22T22:58:05+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2411,19 +2411,19 @@ CVE-2026-60144 (Vulnerability in the Oracle Workflow product of Oracle E-Busines
 CVE-2026-60143 (Vulnerability in the Oracle Workflow product of Oracle E-Business Suit ...)
 	NOT-FOR-US: Oracle
 CVE-2026-59147 (Data::DisjointSet::Shared versions before 0.02 for Perl allow out-of-b ...)
-	TODO: check
+	NOT-FOR-US: Data::DisjointSet::Shared Perl module
 CVE-2026-59146 (Data::SpatialHash::Shared versions before 0.02 for Perl allow out-of-b ...)
-	TODO: check
+	NOT-FOR-US: Data::SpatialHash::Shared Perl module
 CVE-2026-59145 (Data::Intern::Shared versions before 0.02 for Perl allow an out-of-bou ...)
-	TODO: check
+	NOT-FOR-US: Data::Intern::Shared Perl module
 CVE-2026-59144 (Data::RingBuffer::Shared versions before 0.04 for Perl allow a stack b ...)
-	TODO: check
+	NOT-FOR-US: Data::RingBuffer::Shared Perl module
 CVE-2026-59143 (Data::RoaringBitmap::Shared versions before 0.02 for Perl allow an out ...)
-	TODO: check
+	NOT-FOR-US: Data::RoaringBitmap::Shared Perl module
 CVE-2026-56852 (A norm.Iter can enter an infinite loop when handling input containing  ...)
 	TODO: check
 CVE-2026-56844 (A vulnerability in the Veeam Updater component of the Veeam Software A ...)
-	TODO: check
+	NOT-FOR-US: Veeam
 CVE-2026-56820 (Netty is a network application framework for development of protocol s ...)
 	TODO: check
 CVE-2026-56819 (Netty is a network application framework for development of protocol s ...)
@@ -2447,27 +2447,27 @@ CVE-2026-56144 (Incorrect Authorization (CWE-863) in Elasticsearch can allow an
 CVE-2026-55851 (Netty is a network application framework for development of protocol s ...)
 	TODO: check
 CVE-2026-52476 (SQL Injection vulnerability in aiflowy <= 2.1.2 allows a remote attack ...)
-	TODO: check
+	NOT-FOR-US: aiflowy
 CVE-2026-52475 (Cross Site Scripting vulnerability in aiflowy <= 2.1.2 allows a remote ...)
-	TODO: check
+	NOT-FOR-US: aiflowy
 CVE-2026-52474 (An issue in aiflowy <= 2.1.2 allows a remote attacker to obtain sensit ...)
-	TODO: check
+	NOT-FOR-US: aiflowy
 CVE-2026-52472 (SQL injection vulnerability in Wgcloud 3.6.4 allows a remote attacker  ...)
-	TODO: check
+	NOT-FOR-US: Wgcloud
 CVE-2026-52470 (SQL injection vulnerability in Crocus v.1.3.44 allows a remote attacke ...)
-	TODO: check
+	NOT-FOR-US: Crocus
 CVE-2026-52469 (SQL injection vulnerability in Crocus v.1.3.44 allows a remote attacke ...)
-	TODO: check
+	NOT-FOR-US: Crocus
 CVE-2026-50759 (An issue in exo-explore exo 1.0.69 allows a remote attacker to escalat ...)
-	TODO: check
+	NOT-FOR-US: exo-explore exo
 CVE-2026-50758 (Cross Site Scripting vulnerability in DayuanJiang next-ai-draw-io 0.4. ...)
-	TODO: check
+	NOT-FOR-US: DayuanJiang next-ai-draw-io
 CVE-2026-50757 (Directory Traversal vulnerability in DayuanJiang next-ai-draw-io 0.4.1 ...)
-	TODO: check
+	NOT-FOR-US: DayuanJiang next-ai-draw-io
 CVE-2026-50756 (An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacke ...)
-	TODO: check
+	NOT-FOR-US: DayuanJiang next-ai-draw-io
 CVE-2026-50755 (An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacke ...)
-	TODO: check
+	NOT-FOR-US: DayuanJiang next-ai-draw-io
 CVE-2026-49092 (Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441) in Kiba ...)
 	TODO: check
 CVE-2026-47731 (The AMMOS Instrument Toolkit (Formerly the Bespoke Links to Instrument ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a5382b348eb5f8788cd3e7b86d9eed20ecdb0183

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a5382b348eb5f8788cd3e7b86d9eed20ecdb0183
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260722/fdcdeffa/attachment.htm>