[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Mon Oct 5 08:14:54 BST 2026 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c23ff9dd by security tracker role at 2026-10-05T07:14:44+00:00
automatic NOT-FOR-US entries update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,73 +1,73 @@
 CVE-2026-84169 (The UPI QR Code Payment Gateway WordPress plugin through 1.4.3 does no ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-78371 (The File Uploads Addon for WooCommerce WordPress plugin before 1.7.6 d ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-20589 (In venc, there is a possible out of bounds write due to type confusion ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20588 (In mtee, there is a possible escalation of privilege due to a missing  ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20587 (In mtee, there is a possible escalation of privilege due to type confu ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20586 (In vdec, there is a possible out of bounds write due to a missing boun ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20579 (In vdec, there is a possible out of bounds write due to type confusion ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20544 (In meta, there is a possible out of bounds write due to a missing boun ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20543 (In Modem, there is a possible information disclosure due to a logic er ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20542 (In apusys, there is a possible memory corruption due to use after free ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20541 (In Modem, there is a possible out of bounds read due to a missing perm ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20540 (In Modem, there is a possible out of bounds read due to a missing boun ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20539 (In Modem, there is a possible out of bounds read due to a missing boun ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20538 (In Modem, there is a possible out of bounds read due to a missing perm ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20537 (In aidl, there is a possible memory corruption due to use after free.  ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20536 (In aidl, there is a possible memory corruption due to use after free.  ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20535 (In aidl, there is a possible escalation of privilege due to a missing  ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20534 (In Modem, there is a possible out of bounds read due to an incorrect b ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20533 (In display, there is a possible escalation of privilege due to an inte ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20532 (In apu, there is a possible application crash due to double free. This ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20531 (In apu, there is a possible memory corruption due to use after free. T ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20530 (In display, there is a possible out of bounds write due to a missing b ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20529 (In battery, there is a possible out of bounds write due to a missing b ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20528 (In ccci, there is a possible out of bounds write and read due to a mis ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20527 (In Modem, there is a possible system crash due to a missing bounds che ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20526 (In Modem, there is a possible out of bounds write due to a missing bou ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20525 (In Modem, there is a possible system crash due to improper input valid ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20524 (In apu, there is a possible memory corruption due to improper input va ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20523 (In neuropilot, there is a possible out of bounds write due to a missin ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20522 (In neuropilot, there is a possible out of bounds write due to a missin ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20521 (In Video HAL, there is a possible escalation of privilege due to a mis ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20520 (In Modem, there is a possible out of bounds write due to a missing bou ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20519 (In Modem, there is a possible out of bounds write due to a missing bou ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-19954 (Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command ...)
 	TODO: check
 CVE-2026-13607 (The File Uploads Addon for WooCommerce WordPress plugin through 1.7.6  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-105306 (A flaw was found in the Dynamic Client Registration flow of the Keyclo ...)
 	TODO: check
 CVE-2026-105302 (A flaw was found in the User Session Note mapper of the Keycloak ident ...)
@@ -83,7 +83,7 @@ CVE-2026-105293 (Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerabi
 CVE-2026-105292 (Chaterm before 0.12.1 contains a login cross-site request forgery vuln ...)
 	TODO: check
 CVE-2026-105246 (A vulnerability was found in SourceCodester Online Reviewer Management ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester
 CVE-2026-105245 (A vulnerability has been found in sgl-project sglang up to 0.5.21. Thi ...)
 	TODO: check
 CVE-2026-105238 (A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This vu ...)
@@ -113,39 +113,39 @@ CVE-2026-105221 (The gist RubyGem before 6.1.0 contains an improper certificate
 CVE-2026-105220 (Twine 2 desktop through 2.12.0 contains a cross-site scripting vulnera ...)
 	TODO: check
 CVE-2026-105188 (A vulnerability was found in code-projects Human Resource Management S ...)
-	TODO: check
+	NOT-FOR-US: code-projects
 CVE-2026-105187 (A vulnerability has been found in itsourcecode Online Admission System ...)
-	TODO: check
+	NOT-FOR-US: itsourcecode System
 CVE-2026-105186 (A flaw has been found in itsourcecode Online Admission System 1.0. Thi ...)
-	TODO: check
+	NOT-FOR-US: itsourcecode System
 CVE-2026-105185 (A vulnerability was detected in itsourcecode Online Admission System 1 ...)
-	TODO: check
+	NOT-FOR-US: itsourcecode System
 CVE-2026-105184 (A security vulnerability has been detected in itsourcecode Online Admi ...)
-	TODO: check
+	NOT-FOR-US: itsourcecode System
 CVE-2026-105183 (A weakness has been identified in itsourcecode Online Admission System ...)
-	TODO: check
+	NOT-FOR-US: itsourcecode System
 CVE-2026-105182 (A security flaw has been discovered in SourceCodester Online Reviewer  ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester
 CVE-2026-105181 (A vulnerability was identified in itsourcecode Online Admission System ...)
-	TODO: check
+	NOT-FOR-US: itsourcecode System
 CVE-2026-105180 (A vulnerability was determined in Jeebase 0.0.1. This vulnerability af ...)
 	TODO: check
 CVE-2026-105179 (A weakness has been identified in SourceCodester Drug Recommendation S ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester
 CVE-2026-105178 (A security flaw has been discovered in SourceCodester Drug Recommendat ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester
 CVE-2026-105177 (A vulnerability was identified in SourceCodester Drug Recommendation S ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester
 CVE-2026-105176 (A vulnerability was determined in SourceCodester Drug Recommendation S ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester
 CVE-2026-105175 (A vulnerability was found in SourceCodester Drug Recommendation System ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester
 CVE-2026-105174 (A vulnerability has been found in Gerapy up to 0.9.13. This vulnerabil ...)
 	TODO: check
 CVE-2026-105173 (A flaw has been found in code-projects Human Resource Management 1.0.  ...)
-	TODO: check
+	NOT-FOR-US: code-projects
 CVE-2026-105172 (A vulnerability was detected in itsourcecode Online Admission System 1 ...)
-	TODO: check
+	NOT-FOR-US: itsourcecode System
 CVE-2026-105171 (A security vulnerability has been detected in kishor-23 food-waste-man ...)
 	TODO: check
 CVE-2026-105170 (A weakness has been identified in kishor-23 food-waste-management-syst ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c23ff9dda1073872e99a47916b93b39df51dcde7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c23ff9dda1073872e99a47916b93b39df51dcde7
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261005/7243b23f/attachment.htm>

More information about the debian-security-tracker-commits mailing list