[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
71ef862a by Salvatore Bonaccorso at 2026-11-04T09:30:21+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -362,11 +362,11 @@ CVE-2026-121735 (blueprintUE self-hosted edition before 4.3.4 contains an insuff
 CVE-2026-121734 (ZaneOps 1.14.0 before 1.15.2 contains an authorization bypass vulnerab ...)
 	TODO: check
 CVE-2026-121733 (Bagisto before 2.4.5 contains a stored cross-site scripting vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: Bagisto
 CVE-2026-121732 (RosarioSIS before 12.9 contains an improper authorization vulnerabilit ...)
-	TODO: check
+	NOT-FOR-US: RosarioSIS
 CVE-2026-121731 (RosarioSIS before 12.9 contains a sql injection vulnerability that all ...)
-	TODO: check
+	NOT-FOR-US: RosarioSIS
 CVE-2026-121730 (emailflare before commit cf31f33 contains a missing authorization vuln ...)
 	TODO: check
 CVE-2026-121729 (emailflare before commit cf31f33 contains a missing authorization vuln ...)
@@ -380,7 +380,7 @@ CVE-2026-121652 (Cross-site scripting (XSS) issue in AWS Amplify maplibre-gl-js-
 CVE-2026-121631 (Lightdash 0.2609.0 before 3.137.0 contains an authorization bypass vul ...)
 	TODO: check
 CVE-2026-121628 (Bagisto before 2.3.16 and 2.4.x before 2.4.1 contains a race condition ...)
-	TODO: check
+	NOT-FOR-US: Bagisto
 CVE-2026-121627 (buku 5.0 through 5.1.1 contains a stored cross-site scripting vulnerab ...)
 	TODO: check
 CVE-2026-121626 (GNU Gatekeeper (gnugk) before 5.16 contains an out-of-bounds read vuln ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/71ef862a45206d26ebe1b878d6780c503844c809

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/71ef862a45206d26ebe1b878d6780c503844c809
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261104/80495496/attachment.htm>