[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0dddab14 by Salvatore Bonaccorso at 2026-06-19T14:42:37+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -58,7 +58,7 @@ CVE-2026-56075 (PraisonAI before 4.5.128 contains an arbitrary shell command exe
 CVE-2026-56074 (PraisonAI before 1.5.128 caches tool approval decisions by tool name o ...)
 	NOT-FOR-US: PraisonAI
 CVE-2026-54414 (FileRise before 3.16.0 is vulnerable to path traversal in the shared-f ...)
-	TODO: check
+	NOT-FOR-US: FileRise
 CVE-2026-54130 (Missing authentication for critical function in M365 Copilot allows an ...)
 	NOT-FOR-US: Microsoft
 CVE-2026-54017 (Open WebUI is a self-hosted artificial intelligence platform designed  ...)
@@ -70,23 +70,23 @@ CVE-2026-50034 (An attacker within BLE communication range can passively interce
 CVE-2026-4328 (The Advanced Import plugin for WordPress is vulnerable to Server-Side  ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-49454 (Relyra is a strict-by-default SAML 2.0 Service Provider library for El ...)
-	TODO: check
+	NOT-FOR-US: relyra
 CVE-2026-49257 (mcp-pinot is a Python-based Model Context Protocol (MCP) server for in ...)
 	NOT-FOR-US: mcp-pinot
 CVE-2026-49252 (deepstream is a server that allows clients and backend services to syn ...)
-	TODO: check
+	NOT-FOR-US: deepstream
 CVE-2026-49248 (OneDev is a Git server with CI/CD, kanban, and packages. In versions 1 ...)
-	TODO: check
+	NOT-FOR-US: OneDev
 CVE-2026-49205 (phpMyFAQ is an open source FAQ web application. Versions prior to  4.1 ...)
 	NOT-FOR-US: phpMyFAQ
 CVE-2026-48983 (pam_usb provides hardware authentication for Linux using ordinary remo ...)
-	TODO: check
+	NOT-FOR-US: pam_usb
 CVE-2026-48982 (pam_usb provides hardware authentication for Linux using ordinary remo ...)
-	TODO: check
+	NOT-FOR-US: pam_usb
 CVE-2026-48981 (pam_usb provides hardware authentication for Linux using ordinary remo ...)
-	TODO: check
+	NOT-FOR-US: pam_usb
 CVE-2026-48980 (pam_usb provides hardware authentication for Linux using removable med ...)
-	TODO: check
+	NOT-FOR-US: pam_usb
 CVE-2026-48716 (nanobot is a personal AI assistant. In versions 0.1.5.post3 and prior, ...)
 	NOT-FOR-US: nanobot
 CVE-2026-47847 (Bitnami MariaDB Galera container images and Helm chart are affected by ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0dddab149ba05c5c727a1b37d62d28d44a6db103

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0dddab149ba05c5c727a1b37d62d28d44a6db103
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260619/4dc5adaf/attachment.htm>