[Git][security-tracker-team/security-tracker][master] NFUs

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c166a0b3 by Moritz Muehlenhoff at 2026-11-01T23:24:33+01:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2760,7 +2760,7 @@ CVE-2026-118758 (Kubeflow Pipelines enables users to build and deploy portable,
 CVE-2026-118673 (KeePassXC is a cross-platform community-driven port of the Windows app ...)
 	TODO: check
 CVE-2026-118425 (A flaw was found in the secure-redirect-uris-enforcer client policy of ...)
-	TODO: check
+	- keycloak <itp> (bug #1088287)
 CVE-2026-118192 (The JoomSport \u2013 for Sports: Team & League, Football, Hockey & mor ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-118097 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
@@ -8255,15 +8255,15 @@ CVE-2026-116505 (A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268_B2022
 CVE-2026-116504 (A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268_B202211 ...)
 	NOT-FOR-US: TOTOLINK
 CVE-2026-116502 (A flaw has been found in turboderp-org ExLlamaV2 up to 0.3.2. The impa ...)
-	TODO: check
+	NOT-FOR-US: ExLlamaV2
 CVE-2026-116482 (A vulnerability has been found in subhajitkhan online-clinic-managemen ...)
-	TODO: check
+	NOT-FOR-US: online-clinic-management
 CVE-2026-116479 (A flaw has been found in a2aproject a2a-java up to 1.2.0.Final. This i ...)
-	TODO: check
+	NOT-FOR-US: a2aproject a2a-java
 CVE-2026-116478 (A vulnerability was detected in a2aproject a2a-go up to 2.4.0. This af ...)
-	TODO: check
+	NOT-FOR-US: a2aproject a2a-go
 CVE-2026-116477 (A security vulnerability has been detected in a2aproject a2a-dotnet up ...)
-	TODO: check
+	NOT-FOR-US: a2aproject a2a-dotnet
 CVE-2026-115927 (Tornado is a Python web framework and asynchronous networking library. ...)
 	- python-tornado 6.6.0-1 (bug #1152300)
 	NOTE: https://github.com/tornadoweb/tornado/security/advisories/GHSA-r4j5-9xpp-3985



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c166a0b3fb6ffd363193a0ce56524a847df9dbc5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c166a0b3fb6ffd363193a0ce56524a847df9dbc5
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261101/9ea5e97d/attachment.htm>