[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4e540808 by Salvatore Bonaccorso at 2026-10-01T11:24:03+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -85,41 +85,41 @@ CVE-2026-76142 (Insufficient authentication and access control on the internal-o
 CVE-2026-67075 (HCL Digital Experience is affected by improper input sanitation. This  ...)
 	NOT-FOR-US: HCL
 CVE-2026-51872 (Devika v1.0 is vulnerable to Code Injection via the Runner.run_code fu ...)
-	TODO: check
+	NOT-FOR-US: Devika
 CVE-2026-51871 (Devika v1.0 is vulnerable to Code Injection in the Runner.execute func ...)
-	TODO: check
+	NOT-FOR-US: Devika
 CVE-2026-51870 (DeepTutor v1.4.0 is vulnerable to command execution in /tutorbot/agent ...)
-	TODO: check
+	NOT-FOR-US: DeepTutor
 CVE-2026-51869 (DB-GPT v0.8.0 sandbox API silently falls back to LocalRuntime and exec ...)
-	TODO: check
+	NOT-FOR-US: DB-GPT
 CVE-2026-51867 (agentgpt v.1.0.0 is vulnerable to Incorrect Access Control in next/src ...)
-	TODO: check
+	NOT-FOR-US: agentgpt
 CVE-2026-51866 (In DB-GPT 0.7.5 and 0.8.0, a skill uploaded through the real /api/v1/s ...)
-	TODO: check
+	NOT-FOR-US: DB-GPT
 CVE-2026-51864 (DB-GPT v0.7.5 and v0.8.0 contains directory traversal in python_file_u ...)
-	TODO: check
+	NOT-FOR-US: DB-GPT
 CVE-2026-51862 (DB-GPT 0.8.0 contains directory traversal in skill_upload (packages/db ...)
-	TODO: check
+	NOT-FOR-US: DB-GPT
 CVE-2026-51861 (bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Code Injection  ...)
-	TODO: check
+	NOT-FOR-US: bisheng
 CVE-2026-51860 (bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Directory Trave ...)
-	TODO: check
+	NOT-FOR-US: bisheng
 CVE-2026-51859 (bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to directory trave ...)
-	TODO: check
+	NOT-FOR-US: bisheng
 CVE-2026-51858 (In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, TerminalToolkit.s ...)
-	TODO: check
+	NOT-FOR-US: camel-ai camel
 CVE-2026-51857 (In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, CodeExecutionTool ...)
-	TODO: check
+	NOT-FOR-US: camel-ai camel
 CVE-2026-51856 (In agentscope 1.0.18, 1.0.19, and 1.0.19 when the RealtimeAgent sessio ...)
-	TODO: check
+	NOT-FOR-US: agentscope
 CVE-2026-51853 (agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversa ...)
-	TODO: check
+	NOT-FOR-US: agent-zero
 CVE-2026-51852 (agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversa ...)
-	TODO: check
+	NOT-FOR-US: agent-zero
 CVE-2026-51570 (modelscope Agentscope v1.0.0-v1.0.8 is vulnerable to Path Traversal in ...)
-	TODO: check
+	NOT-FOR-US: modelscope Agentscope
 CVE-2026-51568 (modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal i ...)
-	TODO: check
+	NOT-FOR-US: modelscope Agentscope
 CVE-2026-47096 (AJA HELO Plus firmware before 2.1.7 contains a stored cross-site scrip ...)
 	TODO: check
 CVE-2026-19253 (The Cache Enabler WordPress plugin before 1.8.17 does not validate a U ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4e540808aef0e6b79013b0e66c56737ac90a0224

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4e540808aef0e6b79013b0e66c56737ac90a0224
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261001/80261965/attachment.htm>