[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sat Jun 13 08:45:37 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
914e74f9 by Salvatore Bonaccorso at 2026-06-13T09:45:13+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -9,31 +9,31 @@ CVE-2026-9062 (The Store Locator WordPress plugin before 1.6.9 does not validate
 CVE-2026-9061 (The Store Locator WordPress plugin before 1.6.9 does not sanitize and  ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-6676 (Heap buffer out-of-bounds write vulnerability in Avira Antivirus engin ...)
-	TODO: check
+	NOT-FOR-US: Avira
 CVE-2026-54398 (An authorization flaw in MISP\u2019s object add/edit handling allowed  ...)
-	TODO: check
+	NOT-FOR-US: MISP
 CVE-2026-54397 (A vulnerability in MISP\u2019s non-REST event editing path allowed an  ...)
-	TODO: check
+	NOT-FOR-US: MISP
 CVE-2026-54396 (An information disclosure vulnerability exists in the MISP AuthKey edi ...)
-	TODO: check
+	NOT-FOR-US: MISP
 CVE-2026-54395 (MISP contains a reflected cross-site scripting vulnerability in the Ui ...)
-	TODO: check
+	NOT-FOR-US: MISP
 CVE-2026-54394 (MISP contains a path traversal vulnerability in OrganisationsControlle ...)
-	TODO: check
+	NOT-FOR-US: MISP
 CVE-2026-54393 (A stored cross-site scripting vulnerability exists in MISP when the Ov ...)
-	TODO: check
+	NOT-FOR-US: MISP
 CVE-2026-54362 (An incorrect visibility condition in the MISP event template builder a ...)
-	TODO: check
+	NOT-FOR-US: MISP
 CVE-2026-54361 (MISP contained multiple mass assignment vulnerabilities in the handlin ...)
-	TODO: check
+	NOT-FOR-US: MISP
 CVE-2026-54360 (A mass assignment vulnerability exists in MISP\u2019s sharing group cr ...)
-	TODO: check
+	NOT-FOR-US: MISP
 CVE-2026-54359 (MISP contains an insecure default configuration in which the Security. ...)
-	TODO: check
+	NOT-FOR-US: MISP
 CVE-2026-54358 (An incorrect authorization vulnerability in MISP allows an organizatio ...)
-	TODO: check
+	NOT-FOR-US: MISP
 CVE-2026-54357 (An improper authorization vulnerability in MISP allowed an authenticat ...)
-	TODO: check
+	NOT-FOR-US: MISP
 CVE-2026-54231 (A content injection vulnerability was found in the ABRT post-create ev ...)
 	TODO: check
 CVE-2026-54230 (A symlink following vulnerability was found in the ABRT post-create ev ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/914e74f9a030063be45e1c1cde4a80be5124335f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/914e74f9a030063be45e1c1cde4a80be5124335f
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260613/a0651cd0/attachment.htm>


More information about the debian-security-tracker-commits mailing list