[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
282a92e5 by Salvatore Bonaccorso at 2026-11-02T09:49:18+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -187,35 +187,35 @@ CVE-2026-120324 (A weakness has been identified in Aklivity Zilla up to 1.3.4/2.
 CVE-2026-120323 (A security flaw has been discovered in samanhappy MCPHub up to 1.0.45/ ...)
 	NOT-FOR-US: MCPHub
 CVE-2026-120322 (A vulnerability was identified in Termix-SSH Termix up to 2.9.2. This  ...)
-	TODO: check
+	NOT-FOR-US: Termix
 CVE-2026-120320 (A vulnerability was determined in jxxghp MoviePilot up to 3.1.2. This  ...)
-	TODO: check
+	NOT-FOR-US: jxxghp MoviePilot
 CVE-2026-120319 (A vulnerability was found in Sanluan PublicCMS 4.x/5.x/6.x. This affec ...)
-	TODO: check
+	NOT-FOR-US: Sanluan PublicCMS
 CVE-2026-120317 (http4k from 4.9.10.0 before 6.60.0.0 contains a missing integrity chec ...)
-	TODO: check
+	NOT-FOR-US: http4k
 CVE-2026-120316 (http4k before 6.62.0.0-ee contains a path traversal vulnerability in T ...)
-	TODO: check
+	NOT-FOR-US: http4k
 CVE-2026-120315 (LobeHub Chat from 1.84.26 before 2.1.49 contains a path traversal vuln ...)
-	TODO: check
+	NOT-FOR-US: LobeHub Chat
 CVE-2026-120314 (Network-AI from 5.14.0 before 5.15.5 contains a missing authentication ...)
-	TODO: check
+	NOT-FOR-US: Network-AI
 CVE-2026-120313 (Network-AI before 5.15.5 contains a path traversal vulnerability in In ...)
-	TODO: check
+	NOT-FOR-US: Network-AI
 CVE-2026-120312 (Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnera ...)
-	TODO: check
+	NOT-FOR-US: Network-AI
 CVE-2026-120311 (Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnera ...)
-	TODO: check
+	NOT-FOR-US: Network-AI
 CVE-2026-120310 (Parse Server before 8.6.109 and 9.0.0 before 9.10.6-alpha.1 returns st ...)
 	NOT-FOR-US: Parse Server
 CVE-2026-120309 (Nuxt from 4.6.0 before 4.6.2 contains a route parameter confusion vuln ...)
-	TODO: check
+	NOT-FOR-US: Nuxt
 CVE-2026-120308 (A Beta9 tenant can attach a volume when deploying a function, endpoint ...)
-	TODO: check
+	NOT-FOR-US: Beta9
 CVE-2026-120307 (The Beta9 worker serves the sandbox file API from outside the containe ...)
-	TODO: check
+	NOT-FOR-US: Beta9
 CVE-2026-120306 (Beta9 turns each shell command in a tenant image definition into a Doc ...)
-	TODO: check
+	NOT-FOR-US: Beta9
 CVE-2026-120283 (A vulnerability was identified in Linksys E8450 1.2.00.360516. Affecte ...)
 	NOT-FOR-US: Linksys
 CVE-2026-120282 (A vulnerability was determined in WAVLINK WN536AX6-A V260507. This imp ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/282a92e52121c9cc230e08c01a93f06e3efcc3f7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/282a92e52121c9cc230e08c01a93f06e3efcc3f7
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261102/fa7a3db2/attachment.htm>