[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
30567953 by Salvatore Bonaccorso at 2026-10-04T21:30:45+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5,13 +5,13 @@ CVE-2026-97276 (Improper Neutralization of Input During Web Page Generation ('Cr
 CVE-2026-105224 (YesWiki before 4.6.7 contains a cross-site scripting vulnerability in  ...)
 	NOT-FOR-US: YesWiki
 CVE-2026-105219 (Mammoth.js 1.3.0 before 1.12.3 contains a regular expression denial of ...)
-	TODO: check
+	NOT-FOR-US: mammoth (aka mammoth.js) Node.js module
 CVE-2026-105218 (gopay before 1.5.119 disables TLS certificate verification in defaultC ...)
-	TODO: check
+	NOT-FOR-US: gopay
 CVE-2026-105217 (Cockpit CMS 2.12.0 before 2.14.1 disables TLS certificate verification ...)
-	TODO: check
+	NOT-FOR-US: Cockpit CMS
 CVE-2026-105216 (go-micro before 6.0.0 contains an improper certificate validation vuln ...)
-	TODO: check
+	NOT-FOR-US: go-micro
 CVE-2026-105215 (ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication ...)
 	NOT-FOR-US: ZITADEL
 CVE-2026-105214 (Zitadel before 4.16.2 contains a server-side request forgery vulnerabi ...)
@@ -35,29 +35,29 @@ CVE-2026-105206 (ZITADEL 3.0.0 through 3.4.15 and 4.x before 4.17.3 contains an
 CVE-2026-105205 (SiYuan before 3.8.5 contains an information disclosure vulnerability t ...)
 	NOT-FOR-US: SiYuan
 CVE-2026-105161 (A flaw has been found in invariant-systems-ai aiir up to 1.7.0. The af ...)
-	TODO: check
+	NOT-FOR-US: invariant-systems-ai aiir
 CVE-2026-105158 (A vulnerability was detected in RainyGao DocSys up to 2.02.85. The imp ...)
-	TODO: check
+	NOT-FOR-US: RainyGao DocSys
 CVE-2026-105157 (A security vulnerability has been detected in RainyGao DocSys up to 2. ...)
-	TODO: check
+	NOT-FOR-US: RainyGao DocSys
 CVE-2026-105156 (A weakness has been identified in YzmCMS up to 7.6. Impacted is the fu ...)
-	TODO: check
+	NOT-FOR-US: YzmCMS
 CVE-2026-105149 (A security flaw has been discovered in mooSocial up to 3.2.4. This iss ...)
-	TODO: check
+	NOT-FOR-US: mooSocial
 CVE-2026-105148 (A vulnerability was identified in SciPhi-AI R2R up to 3.6.6. This vuln ...)
-	TODO: check
+	NOT-FOR-US: SciPhi-AI R2R
 CVE-2026-105147 (A vulnerability was determined in SciPhi-AI R2R up to 3.6.6. This affe ...)
-	TODO: check
+	NOT-FOR-US: SciPhi-AI R2R
 CVE-2026-105146 (A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-202608 ...)
-	TODO: check
+	NOT-FOR-US: Discuz!
 CVE-2026-105145 (A vulnerability has been found in Weaviate Verba up to 2.1.3. Affected ...)
-	TODO: check
+	NOT-FOR-US: Weaviate Verba
 CVE-2026-105144 (A flaw has been found in Drogon up to 1.9.13-1/10.0-beta.3 on Windows. ...)
-	TODO: check
+	NOT-FOR-US: Drogon
 CVE-2026-105141 (A security flaw has been discovered in topoteretes cognee up to 1.5.4. ...)
-	TODO: check
+	NOT-FOR-US: topoteretes cognee
 CVE-2026-105137 (A vulnerability was found in Laradock up to 20.4. Impacted is an unkno ...)
-	TODO: check
+	NOT-FOR-US: Laradock
 CVE-2026-105089 (WWBN AVideo through 29.2.0 contains a stored cross-site scripting vuln ...)
 	NOT-FOR-US: WWBN AVideo
 CVE-2026-105086 (WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/30567953fbb3605588c01062660051b1801230cd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/30567953fbb3605588c01062660051b1801230cd
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261004/f9932b9c/attachment.htm>