[Git][security-tracker-team/security-tracker][master] Process some OpenAM specific NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ac8812c3 by Salvatore Bonaccorso at 2026-10-03T21:32:31+02:00
Process some OpenAM specific NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -50,23 +50,23 @@ CVE-2026-71883 (In Bouncy Castle for Java LTS before 2.73.13, the one-shot nativ
 CVE-2026-18040 (In Bouncy Castle for Java before 1.86, HQC leaked secret-derived data  ...)
 	TODO: check
 CVE-2026-105122 (OpenAM before 16.1.3 contains a server-side request forgery vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: OpenAM
 CVE-2026-105121 (OpenAM before 16.1.3 contains an improper authorization vulnerability  ...)
-	TODO: check
+	NOT-FOR-US: OpenAM
 CVE-2026-105120 (OpenAM before 16.1.3 contains an authorization bypass vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: OpenAM
 CVE-2026-105119 (OpenAM before 16.1.3 applies its OAuth2 Provider PKCE enforcement only ...)
-	TODO: check
+	NOT-FOR-US: OpenAM
 CVE-2026-105118 (OpenAM before 16.1.3 contains an open redirect vulnerability that allo ...)
-	TODO: check
+	NOT-FOR-US: OpenAM
 CVE-2026-105117 (OpenAM before 16.1.3 contains an email content injection vulnerability ...)
-	TODO: check
+	NOT-FOR-US: OpenAM
 CVE-2026-105116 (OpenAM before 16.1.3 contains a latent cross-site scripting defect tha ...)
-	TODO: check
+	NOT-FOR-US: OpenAM
 CVE-2026-105115 (OpenAM before 16.1.3 contains an unauthenticated arbitrary class insta ...)
-	TODO: check
+	NOT-FOR-US: OpenAM
 CVE-2026-105114 (OpenAM before 16.1.3 contains a reflected cross-site scripting vulnera ...)
-	TODO: check
+	NOT-FOR-US: OpenAM
 CVE-2026-105113 (Nezha Dashboard from 1.8.0 before 2.3.13 contains an improper locking  ...)
 	TODO: check
 CVE-2026-105112 (Nezha from 1.8.0 before 2.3.13 contains a lock-order inversion in Upda ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ac8812c312ed78983084385de2794595ca3aa8a3

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ac8812c312ed78983084385de2794595ca3aa8a3
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261003/3c981740/attachment-0001.htm>