[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a2d44e25 by Salvatore Bonaccorso at 2026-07-23T09:30:35+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -9,11 +9,11 @@ CVE-2026-7534 (The SUMO Reward Points plugin for WordPress is vulnerable to Unau
 CVE-2026-7232 (The FormCraft plugin for WordPress is vulnerable to Stored Cross-Site  ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-7120 (@fastify/static evaluates the allowedPath callback before normalizing  ...)
-	TODO: check
+	NOT-FOR-US: fastify/static
 CVE-2026-6390 (A flaw was found in GNU nano's multi-buffer error message handling. Wh ...)
 	TODO: check
 CVE-2026-64829 (Question2Answer through 1.8.8 contains a session invalidation vulnerab ...)
-	TODO: check
+	NOT-FOR-US: Question2Answer
 CVE-2026-64798 (Persistent URL login keys were also generated using a non-cryptographi ...)
 	NOT-FOR-US: Joomla
 CVE-2026-64797 (IP Login trusted forwarded client-IP headers without requiring a confi ...)
@@ -43,29 +43,29 @@ CVE-2026-63280 (Conditions administration did not consistently enforce tokens an
 CVE-2026-63265 (Privileged Regular Labs AJAX endpoints did not consistently require va ...)
 	NOT-FOR-US: Joomla
 CVE-2026-63226 (Printers and Multifunction Printers (MFPs) provided by Ricoh Company,  ...)
-	TODO: check
+	NOT-FOR-US: Ricoh
 CVE-2026-61246 (Vulnerability in the Oracle Platform Security for Java product of Orac ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-60455 (Vulnerability in the Oracle Platform Security for Java product of Orac ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-60439 (Vulnerability in the Oracle Platform Security for Java product of Orac ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-60373 (Vulnerability in the Oracle Platform Security for Java product of Orac ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-60372 (Vulnerability in the Oracle Platform Security for Java product of Orac ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-60371 (Vulnerability in the Oracle Platform Security for Java product of Orac ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-60370 (Vulnerability in the Oracle Platform Security for Java product of Orac ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-60369 (Vulnerability in the Oracle Platform Security for Java product of Orac ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-60368 (Vulnerability in the Oracle Platform Security for Java product of Orac ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-60367 (Vulnerability in the Oracle Platform Security for Java product of Orac ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-60366 (Vulnerability in the Oracle Platform Security for Java product of Orac ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-59676 (A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in s ...)
 	TODO: check
 CVE-2026-38766 (An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a l ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a2d44e252fee71abf40085ff9a2095a1ec7f46a0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a2d44e252fee71abf40085ff9a2095a1ec7f46a0
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260723/fc6a3660/attachment-0001.htm>