[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
07534284 by Salvatore Bonaccorso at 2026-07-29T10:01:38+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -102,7 +102,7 @@ CVE-2026-54659 (Pagy is agnostic pagination in plain Ruby. From 43.0.0 until 43.
 	NOTE: https://github.com/ddnexus/pagy/pull/908
 	NOTE: Fixed by: https://github.com/ddnexus/pagy/commit/efcf09690e9fa7d7abdfb987b785a55f87e287df (43.5.6)
 CVE-2026-54658 (Hypequery is a TypeScript semantic layer for ClickHouse. Prior to 2.0. ...)
-	TODO: check
+	NOT-FOR-US: Hypequery
 CVE-2026-54656 (datamodel-code-generator generates Pydantic v2 models, dataclasses, Ty ...)
 	NOT-FOR-US: datamodel-code-generator
 CVE-2026-54655 (datamodel-code-generator generates Python data models from schema defi ...)
@@ -112,17 +112,17 @@ CVE-2026-54654 (datamodel-code-generator generates Python data models from schem
 CVE-2026-54653 (datamodel-code-generator generates Pydantic v2 models, dataclasses, Ty ...)
 	NOT-FOR-US: datamodel-code-generator
 CVE-2026-54650 (openhole exposes localhost to the internet in one command. In 0.1.1 an ...)
-	TODO: check
+	NOT-FOR-US: openhole
 CVE-2026-54638 (gotd/td is a T Telegram MTProto API client in Go. Prior to 0.145.1, pr ...)
-	TODO: check
+	NOT-FOR-US: gotd/td
 CVE-2026-54621 (datamodel-code-generator generates Python data models from schema defi ...)
 	NOT-FOR-US: datamodel-code-generator
 CVE-2026-49447 (Cosmos provides users the ability self-host a home server by acting as ...)
-	TODO: check
+	NOT-FOR-US: Cosmos
 CVE-2026-48060 (Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. ...)
-	TODO: check
+	NOT-FOR-US: Litestar
 CVE-2026-47219 (find-my-way is a framework-independent HTTP router that internally use ...)
-	TODO: check
+	NOT-FOR-US: find-my-way
 CVE-2026-3158 (IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through ...)
 	NOT-FOR-US: IBM
 CVE-2026-3157 (IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/075342841974f373f8582bd6cecb657a7741bf21

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/075342841974f373f8582bd6cecb657a7741bf21
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260729/750db8d4/attachment.htm>