[Git][security-tracker-team/security-tracker][master] NFUs
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Mon Mar 9 09:14:48 GMT 2026
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
fba23d43 by Moritz Muehlenhoff at 2026-03-09T10:14:18+01:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -291,7 +291,7 @@ CVE-2026-30834 (PinchTab is a standalone HTTP server that gives AI agents direct
CVE-2026-30832 (Soft Serve is a self-hostable Git server for the command line. From ve ...)
NOT-FOR-US: Soft Serve
CVE-2026-2671 (A vulnerability was detected in Mendi Neurofeedback Headset V4. Affect ...)
- TODO: check
+ NOT-FOR-US: Mendi Neurofeedback Headset
CVE-2026-29787 (mcp-memory-service is an open-source memory backend for multi-agent sy ...)
NOT-FOR-US: mcp-memory-service
CVE-2026-29786 (node-tar is a full-featured Tar for Node.js. Prior to version 7.5.10, ...)
@@ -301,7 +301,7 @@ CVE-2026-29786 (node-tar is a full-featured Tar for Node.js. Prior to version 7.
CVE-2026-29784 (Ghost is a Node.js content management system. From version 5.101.6 to ...)
- ghost <itp> (bug #892150)
CVE-2026-29781 (Sliver is a command and control framework that uses a custom Wireguard ...)
- TODO: check
+ NOT-FOR-US: Sliver
CVE-2026-29780 (eml_parser serves as a python module for parsing eml files and returni ...)
TODO: check
CVE-2026-29779 (UptimeFlare is a serverless uptime monitoring & status page solution, ...)
@@ -1263,7 +1263,7 @@ CVE-2025-69534 (Python-Markdown version 3.8 contain a vulnerability where malfor
CVE-2025-64166 (Mercurius is a GraphQL adapter for Fastify. Prior to version 16.4.0, a ...)
NOT-FOR-US: Mercurius
CVE-2025-45691 (An Arbitrary File Read vulnerability exists in the ImageTextPromptValu ...)
- TODO: check
+ NOT-FOR-US: Ragas
CVE-2025-29165 (An issue in D-Link DIR-1253 MESH V1.6.1684 allows an attacker to escal ...)
NOT-FOR-US: D-Link
CVE-2025-13476 (Rakuten Viber Cloak mode in Android v25.7.2.0g and Windows v25.6.0.0\u ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fba23d43a1084f3e74c600bb1fc68849c3824f90
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fba23d43a1084f3e74c600bb1fc68849c3824f90
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260309/e838786d/attachment.htm>
More information about the debian-security-tracker-commits
mailing list