[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Mon Oct 5 08:35:02 BST 2026 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e5fcac34 by Salvatore Bonaccorso at 2026-10-05T09:34:45+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -78,43 +78,43 @@ CVE-2026-105302 (A flaw was found in the User Session Note mapper of the Keycloa
 CVE-2026-105301 (A flaw was found in the X.509 client-certificate authenticator of Keyc ...)
 	- keycloak <itp> (bug #1088287)
 CVE-2026-105295 (GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism tha ...)
-	TODO: check
+	NOT-FOR-US: GitAhead
 CVE-2026-105294 (Legcord 1.1.0 through 1.3.0 contains a configuration injection vulnera ...)
-	TODO: check
+	NOT-FOR-US: Legcord
 CVE-2026-105293 (Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: Legcord
 CVE-2026-105292 (Chaterm before 0.12.1 contains a login cross-site request forgery vuln ...)
-	TODO: check
+	NOT-FOR-US: Chaterm
 CVE-2026-105246 (A vulnerability was found in SourceCodester Online Reviewer Management ...)
 	NOT-FOR-US: SourceCodester
 CVE-2026-105245 (A vulnerability has been found in sgl-project sglang up to 0.5.21. Thi ...)
-	TODO: check
+	NOT-FOR-US: sgl-project sglang
 CVE-2026-105238 (A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This vu ...)
-	TODO: check
+	NOT-FOR-US: ChatGPTNextWeb NextChat
 CVE-2026-105237 (A vulnerability was detected in linlinjava litemall up to 1.8.0. This  ...)
-	TODO: check
+	NOT-FOR-US: linlinjava litemall
 CVE-2026-105233 (A vulnerability has been found in kishor-23 food-waste-management-syst ...)
-	TODO: check
+	NOT-FOR-US: kishor-23 food-waste-management-system
 CVE-2026-105232 (A flaw has been found in kishor-23 food-waste-management-system 411989 ...)
-	TODO: check
+	NOT-FOR-US: kishor-23 food-waste-management-system
 CVE-2026-105231 (A vulnerability was detected in kishor-23 food-waste-management-system ...)
-	TODO: check
+	NOT-FOR-US: kishor-23 food-waste-management-system
 CVE-2026-105230 (A security vulnerability has been detected in kishor-23 food-waste-man ...)
-	TODO: check
+	NOT-FOR-US: kishor-23 food-waste-management-system
 CVE-2026-105229 (A weakness has been identified in kishor-23 food-waste-management-syst ...)
-	TODO: check
+	NOT-FOR-US: kishor-23 food-waste-management-system
 CVE-2026-105226 (A security flaw has been discovered in osCommerce osCommerce2 up to 2. ...)
-	TODO: check
+	NOT-FOR-US: osCommerce osCommerce2
 CVE-2026-105225 (A vulnerability was identified in osCommerce osCommerce2 up to 2.3.4.1 ...)
-	TODO: check
+	NOT-FOR-US: osCommerce osCommerce2
 CVE-2026-105223 (maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate ...)
-	TODO: check
+	NOT-FOR-US: maclof kubernetes-client
 CVE-2026-105222 (The alexpechkarev/google-maps Laravel package through 12.16 disables T ...)
-	TODO: check
+	NOT-FOR-US: alexpechkarev/google-maps Laravel package
 CVE-2026-105221 (The gist RubyGem before 6.1.0 contains an improper certificate validat ...)
-	TODO: check
+	NOT-FOR-US: gist RubyGem
 CVE-2026-105220 (Twine 2 desktop through 2.12.0 contains a cross-site scripting vulnera ...)
-	TODO: check
+	NOT-FOR-US: Twine 2 desktop
 CVE-2026-105188 (A vulnerability was found in code-projects Human Resource Management S ...)
 	NOT-FOR-US: code-projects
 CVE-2026-105187 (A vulnerability has been found in itsourcecode Online Admission System ...)
@@ -132,7 +132,7 @@ CVE-2026-105182 (A security flaw has been discovered in SourceCodester Online Re
 CVE-2026-105181 (A vulnerability was identified in itsourcecode Online Admission System ...)
 	NOT-FOR-US: itsourcecode System
 CVE-2026-105180 (A vulnerability was determined in Jeebase 0.0.1. This vulnerability af ...)
-	TODO: check
+	NOT-FOR-US: Jeebase
 CVE-2026-105179 (A weakness has been identified in SourceCodester Drug Recommendation S ...)
 	NOT-FOR-US: SourceCodester
 CVE-2026-105178 (A security flaw has been discovered in SourceCodester Drug Recommendat ...)
@@ -144,31 +144,31 @@ CVE-2026-105176 (A vulnerability was determined in SourceCodester Drug Recommend
 CVE-2026-105175 (A vulnerability was found in SourceCodester Drug Recommendation System ...)
 	NOT-FOR-US: SourceCodester
 CVE-2026-105174 (A vulnerability has been found in Gerapy up to 0.9.13. This vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: Gerapy
 CVE-2026-105173 (A flaw has been found in code-projects Human Resource Management 1.0.  ...)
 	NOT-FOR-US: code-projects
 CVE-2026-105172 (A vulnerability was detected in itsourcecode Online Admission System 1 ...)
 	NOT-FOR-US: itsourcecode System
 CVE-2026-105171 (A security vulnerability has been detected in kishor-23 food-waste-man ...)
-	TODO: check
+	NOT-FOR-US: kishor-23 food-waste-management-system
 CVE-2026-105170 (A weakness has been identified in kishor-23 food-waste-management-syst ...)
-	TODO: check
+	NOT-FOR-US: kishor-23 food-waste-management-system
 CVE-2026-105169 (A security flaw has been discovered in kishor-23 food-waste-management ...)
-	TODO: check
+	NOT-FOR-US: kishor-23 food-waste-management-system
 CVE-2026-105168 (A vulnerability was identified in kishor-23 food-waste-management-syst ...)
-	TODO: check
+	NOT-FOR-US: kishor-23 food-waste-management-system
 CVE-2026-105167 (A vulnerability was determined in kishor-23 food-waste-management-syst ...)
-	TODO: check
+	NOT-FOR-US: kishor-23 food-waste-management-system
 CVE-2026-105166 (A vulnerability was found in kishor-23 food-waste-management-system 41 ...)
-	TODO: check
+	NOT-FOR-US: kishor-23 food-waste-management-system
 CVE-2026-105165 (A vulnerability has been found in devopspolis secrets-replicator up to ...)
-	TODO: check
+	NOT-FOR-US: devopspolis secrets-replicator
 CVE-2026-105164 (A flaw has been found in NASA cFS up to 7.0.1. This issue affects the  ...)
-	TODO: check
+	NOT-FOR-US: NASA cFS
 CVE-2026-105163 (A vulnerability was detected in crossplane crossplane-runtime up to 2. ...)
-	TODO: check
+	NOT-FOR-US: crossplane crossplane-runtime
 CVE-2026-100727 (An improper access control vulnerability exists in GROWI, which allow  ...)
-	TODO: check
+	NOT-FOR-US: GROWI
 CVE-2019-25777 (YAML versions before 1.27_001 for Perl allow a loaded perl/glob docume ...)
 	- libyaml-perl 1.29-1
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/44090805/



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e5fcac3407cabb14fbd9b8edc8acf521aa89a2e0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e5fcac3407cabb14fbd9b8edc8acf521aa89a2e0
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261005/1060e705/attachment-0001.htm>

More information about the debian-security-tracker-commits mailing list