[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b2652b0d by security tracker role at 2026-10-04T19:14:31+00:00
automatic NOT-FOR-US entries update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,9 +1,9 @@
 CVE-2026-97307 (Insertion of Sensitive Information Into Sent Data vulnerability in Sty ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-97276 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-105224 (YesWiki before 4.6.7 contains a cross-site scripting vulnerability in  ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-105219 (Mammoth.js 1.3.0 before 1.12.3 contains a regular expression denial of ...)
 	TODO: check
 CVE-2026-105218 (gopay before 1.5.119 disables TLS certificate verification in defaultC ...)
@@ -33,7 +33,7 @@ CVE-2026-105207 (ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.17.3 creates li
 CVE-2026-105206 (ZITADEL 3.0.0 through 3.4.15 and 4.x before 4.17.3 contains an incorre ...)
 	TODO: check
 CVE-2026-105205 (SiYuan before 3.8.5 contains an information disclosure vulnerability t ...)
-	TODO: check
+	NOT-FOR-US: SiYuan
 CVE-2026-105161 (A flaw has been found in invariant-systems-ai aiir up to 1.7.0. The af ...)
 	TODO: check
 CVE-2026-105158 (A vulnerability was detected in RainyGao DocSys up to 2.02.85. The imp ...)
@@ -59,19 +59,19 @@ CVE-2026-105141 (A security flaw has been discovered in topoteretes cognee up to
 CVE-2026-105137 (A vulnerability was found in Laradock up to 20.4. Impacted is an unkno ...)
 	TODO: check
 CVE-2026-105089 (WWBN AVideo through 29.2.0 contains a stored cross-site scripting vuln ...)
-	TODO: check
+	NOT-FOR-US: WWBN AVideo
 CVE-2026-105086 (WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting ...)
-	TODO: check
+	NOT-FOR-US: WWBN AVideo
 CVE-2026-104402 (Insertion of Sensitive Information Into Sent Data vulnerability in far ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-103355 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-103354 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-103344 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-103062 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-66020 [virtio-gpu: disable blob scanouts on mapping cleanup]
 	- qemu <unfixed>
 	NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/3ece85b53c124142c7d5cbb1165d4da125b7c369



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b2652b0da15275380a908c56cf852d7156f572a7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b2652b0da15275380a908c56cf852d7156f572a7
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261004/89fced36/attachment.htm>