[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0f43d6a5 by Salvatore Bonaccorso at 2026-10-04T21:24:12+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -13,25 +13,25 @@ CVE-2026-105217 (Cockpit CMS 2.12.0 before 2.14.1 disables TLS certificate verif
 CVE-2026-105216 (go-micro before 6.0.0 contains an improper certificate validation vuln ...)
 	TODO: check
 CVE-2026-105215 (ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication ...)
-	TODO: check
+	NOT-FOR-US: ZITADEL
 CVE-2026-105214 (Zitadel before 4.16.2 contains a server-side request forgery vulnerabi ...)
-	TODO: check
+	NOT-FOR-US: ZITADEL
 CVE-2026-105213 (ZITADEL 4.x before 4.17.1 does not check an organization's inactive st ...)
-	TODO: check
+	NOT-FOR-US: ZITADEL
 CVE-2026-105212 (ZITADEL 3.x before 3.4.14 and 4.x before 4.16.2 contains an authentica ...)
-	TODO: check
+	NOT-FOR-US: ZITADEL
 CVE-2026-105211 (ZITADEL before 4.17.1 contains an authentication bypass vulnerability  ...)
-	TODO: check
+	NOT-FOR-US: ZITADEL
 CVE-2026-105210 (ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains a missing aut ...)
-	TODO: check
+	NOT-FOR-US: ZITADEL
 CVE-2026-105209 (ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains an improper a ...)
-	TODO: check
+	NOT-FOR-US: ZITADEL
 CVE-2026-105208 (ZITADEL 4.x before 4.17.3 and 3.x through 3.4.15 protects IdP intent t ...)
-	TODO: check
+	NOT-FOR-US: ZITADEL
 CVE-2026-105207 (ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.17.3 creates links bet ...)
-	TODO: check
+	NOT-FOR-US: ZITADEL
 CVE-2026-105206 (ZITADEL 3.0.0 through 3.4.15 and 4.x before 4.17.3 contains an incorre ...)
-	TODO: check
+	NOT-FOR-US: ZITADEL
 CVE-2026-105205 (SiYuan before 3.8.5 contains an information disclosure vulnerability t ...)
 	NOT-FOR-US: SiYuan
 CVE-2026-105161 (A flaw has been found in invariant-systems-ai aiir up to 1.7.0. The af ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0f43d6a5ae9e4c74ca2133d79bb346effa8233b1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0f43d6a5ae9e4c74ca2133d79bb346effa8233b1
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261004/92365222/attachment.htm>