[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5b5cd6b1 by Salvatore Bonaccorso at 2026-11-04T22:53:25+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,5 +1,5 @@
 CVE-2026-97705 (Moleculer is a progressive microservices framework for Node.js. Prior  ...)
-	TODO: check
+	NOT-FOR-US: Moleculer
 CVE-2026-97701 (Zulip is an open-source team collaboration tool. In Zulip Server versi ...)
 	- zulip-server <itp> (bug #800052)
 CVE-2026-97397 (The Remove Google Fonts \u2013 Disable, Block, or Replace with Bunny F ...)
@@ -13,7 +13,7 @@ CVE-2026-94459 (IRISPowerscan contain default user accounts with predictable cre
 CVE-2026-93900 (The Simple CAPTCHA with Cloudflare Turnstile plugin for WordPress is v ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-92704 (SharpEmu is an experimental PlayStation 5 emulator for Windows and Lin ...)
-	TODO: check
+	NOT-FOR-US: SharpEmu
 CVE-2026-91168 (Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linu ...)
 	NOT-FOR-US: Warpgate
 CVE-2026-91163 (Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linu ...)
@@ -35,9 +35,9 @@ CVE-2026-90626 (An uncontrolled memory access in the PDF import code of Apache O
 CVE-2026-90624 (An unchecked memory access in the PDF import code of Apache OpenOffice ...)
 	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-82033 (DeepSeek Harness prior to 0.1.2-alpha.2, and specifically commit 3e240 ...)
-	TODO: check
+	NOT-FOR-US: DeepSeek Harness
 CVE-2026-82029 (Invoice Ninja before 5.13.28 contains a broken access control vulnerab ...)
-	TODO: check
+	NOT-FOR-US: Invoice Ninja
 CVE-2026-76506 (A vulnerability in the web-based management interface of Cisco UCS Cen ...)
 	NOT-FOR-US: Cisco
 CVE-2026-76419 (A vulnerability in the web-based management interface of Cisco Unified ...)
@@ -643,7 +643,7 @@ CVE-2026-64672 (Terragrunt is a flexible orchestration tool that allows Infrastr
 CVE-2026-63502 (Yeti bridges the gap between CTI and DFIR practitioners by providing a ...)
 	NOT-FOR-US: Yeti
 CVE-2026-63501 (ag-psd is a JavaScript library for reading and writing Photoshop Docum ...)
-	TODO: check
+	NOT-FOR-US: ag-psd
 CVE-2026-63500 (Yeti bridges the gap between CTI and DFIR practitioners by providing a ...)
 	NOT-FOR-US: Yeti
 CVE-2026-63499 (zt-zip is a Java library that provides convenience methods for ZIP arc ...)
@@ -679,7 +679,7 @@ CVE-2026-63418 (Monitoring Plugins is a suite of plugins for monitoring applicat
 	NOTE: https://github.com/monitoring-plugins/monitoring-plugins/security/advisories/GHSA-xvvw-4j77-rp7q
 	NOTE: Fixed by: https://github.com/monitoring-plugins/monitoring-plugins/commit/c35c12e58d326ffbd6cfb3c9097653f9f3fb2f4a (v3.0.1)
 CVE-2026-63417 (Logging Redactor is a Python library designed to redact sensitive data ...)
-	TODO: check
+	NOT-FOR-US: Logging Redactor
 CVE-2026-63395 (isomorphic-git is a pure JavaScript implementation of Git for Node.js  ...)
 	NOT-FOR-US: isomorphic-git
 CVE-2026-63198 (traQ is a messenger application built for Digital Creators Club traP.  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5b5cd6b1fc658a70522c0e2bfd6b991886855490

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5b5cd6b1fc658a70522c0e2bfd6b991886855490
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261104/a4af1b0a/attachment.htm>