[Git][security-tracker-team/security-tracker][master] NFUs

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
68489232 by Moritz Muehlenhoff at 2026-11-04T11:24:35+01:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -542,35 +542,35 @@ CVE-2026-121455 (DbGate before 7.3.3 contains a missing authorization vulnerabil
 CVE-2026-121454 (Padloc through 4.3.0 contains a missing authentication vulnerability i ...)
 	TODO: check
 CVE-2026-121453 (SQLBot through 1.10.3 contains a path traversal vulnerability in the i ...)
-	TODO: check
+	NOT-FOR-US: SQLBot
 CVE-2026-121452 (bbs-go through 4.4.6 contains an improper certificate validation vulne ...)
-	TODO: check
+	NOT-FOR-US: bbs-go
 CVE-2026-121451 (AB Download Manager before 1.11.2 contains a cross-site request forger ...)
-	TODO: check
+	NOT-FOR-US: AB Download Manager
 CVE-2026-121450 (CFNext before 3.1.0 contains a weak cryptographic derivation vulnerabi ...)
-	TODO: check
+	NOT-FOR-US: CFNext
 CVE-2026-121449 (Dockhand from 1.0.47 before 1.0.54 exposes plaintext stack secrets bec ...)
-	TODO: check
+	NOT-FOR-US: Dockhand
 CVE-2026-121448 (Dockhand before 1.0.54 contains a path traversal vulnerability that al ...)
-	TODO: check
+	NOT-FOR-US: Dockhand
 CVE-2026-121447 (svg-sanitizer before 1.1.0 contains a cross-site scripting vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: svg-sanitizer
 CVE-2026-121446 (svg-sanitizer from 0.5.0 before 1.1.0 contains an incomplete filtering ...)
-	TODO: check
+	NOT-FOR-US: svg-sanitizer
 CVE-2026-121445 (darylldoyle svg-sanitizer from 1.0.0 before 1.1.0 contains a regular e ...)
-	TODO: check
+	NOT-FOR-US: svg-sanitizer
 CVE-2026-121444 (svg-sanitizer from 0.11.0 before 1.1.0 contains an algorithmic complex ...)
-	TODO: check
+	NOT-FOR-US: svg-sanitizer
 CVE-2026-121443 (svg-sanitizer from 1.1.0 before 1.1.1 contains a denial of service vul ...)
-	TODO: check
+	NOT-FOR-US: svg-sanitizer
 CVE-2026-121442 (Frappe HRMS before 15.61.0 contains a permission bypass vulnerability  ...)
 	NOT-FOR-US: Frappe
 CVE-2026-121441 (Wasmtime before 36.0.19, 37.0.0 before 48.0.7, and 49.0.0 before 49.0. ...)
-	TODO: check
+	NOT-FOR-US: Rust wasmtime wasi-http
 CVE-2026-121440 (Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 fails to check  ...)
-	TODO: check
+	NOT-FOR-US: Rust wasmtime wasi-http
 CVE-2026-121439 (Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 contains a resp ...)
-	TODO: check
+	NOT-FOR-US: Rust wasmtime wasi-http
 CVE-2026-121438 (Mistune before 3.3.3 contains a denial of service vulnerability in Inl ...)
 	- mistune 3.3.4-1
 	[trixie] - mistune <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/68489232a84046f95874f29302d7252b4702b190

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/68489232a84046f95874f29302d7252b4702b190
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261104/e2e9a7b5/attachment-0001.htm>