[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a8a342db by Salvatore Bonaccorso at 2026-11-03T12:50:06+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -398,15 +398,15 @@ CVE-2026-120689 (HDF5 through 2.2.0 contains an uncontrolled recursion vulnerabi
 	NOTE: https://github.com/HDFGroup/hdf5/issues/6403
 	NOTE: HDF not covered by security support, see https://bugs.debian.org/1117722
 CVE-2026-120656 (OpenKruise kruise-manager exposes an unauthenticated ppof endpoint whe ...)
-	TODO: check
+	NOT-FOR-US: OpenKruise kruise-manager
 CVE-2026-120630 (CrewAI contains an SSRF vulnerability caused by its SSRF guard and HTT ...)
-	TODO: check
+	NOT-FOR-US: CrewAI
 CVE-2026-120627 (The Private Internet Access Extension for Firefox contains an unguarde ...)
-	TODO: check
+	NOT-FOR-US: Private Internet Access Extension for Firefox
 CVE-2026-120597 (A vulnerability was identified in Welcart e-Commerce Plugin up to 2.12 ...)
-	TODO: check
+	NOT-FOR-US: Welcart e-Commerce Plugin
 CVE-2026-120596 (A remotely exploitable denial-of-service vulnerability exists in the T ...)
-	TODO: check
+	NOT-FOR-US: Ethernut / egnite
 CVE-2026-120578 (The AI Alt Text Generator plugin for WordPress is vulnerable to author ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-120577 (The FluentCart A New Era of eCommerce \u2013 Faster, Lighter, and Simp ...)
@@ -438,11 +438,11 @@ CVE-2026-120524 (The News Kit Addons For Elementor plugin for WordPress is vulne
 CVE-2026-120518 (The BuddyPress XProfile Image Field plugin for WordPress is vulnerable ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-120503 (A vulnerability was detected in EchoHS GeekezBrowser up to 1.7.2/1.8.0 ...)
-	TODO: check
+	NOT-FOR-US: EchoHS GeekezBrowser
 CVE-2026-120501 (An Otter Wiki 2.20.1 before 2.26.2 contains a file disclosure vulnerab ...)
-	TODO: check
+	NOT-FOR-US: Otter Wiki
 CVE-2026-120500 (An Otter Wiki before 2.26.2 contains a stored cross-site scripting vul ...)
-	TODO: check
+	NOT-FOR-US: Otter Wiki
 CVE-2026-120497 (Stored cross-site scripting (XSS) in the HTML report generator in the  ...)
 	NOT-FOR-US: Amazon
 CVE-2026-120492 (Chainlit 2.12.0 contains a server-side request forgery vulnerability t ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a8a342db1826bda75ab17dba7479bc48ac209428

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a8a342db1826bda75ab17dba7479bc48ac209428
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261103/30c5ee97/attachment.htm>