[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Mon Oct 5 20:15:05 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6c4cd113 by security tracker role at 2026-10-05T19:14:56+00:00
automatic NOT-FOR-US entries update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,25 +1,25 @@
 CVE-2026-97309 (Missing Authorization vulnerability in Webful Creations RepairBuddy co ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-97305 (Authorization Bypass Through User-Controlled Key vulnerability in Them ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-97304 (Missing Authorization vulnerability in Arraytics Timetics timetics all ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-97303 (Missing Authorization vulnerability in Apps Mav Scratch & Win \u2013 G ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-97283 (Deserialization of Untrusted Data vulnerability in Liquid Web / Stella ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-97275 (Improper Validation of Specified Quantity in Input vulnerability in Vi ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-97071 (Incorrect Calculation vulnerability in VillaTheme CURCY woo-multi-curr ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-97070 (Authorization Bypass Through User-Controlled Key vulnerability in Cozy ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-95166 (In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the LabelFormat fi ...)
 	TODO: check
 CVE-2026-95165 (Bacularis 5.4.0 - 6.5.1 is vulnerable to Cross Site Scripting (XSS) in ...)
 	TODO: check
 CVE-2026-94669 (Missing Authorization vulnerability in WP ManageNinja LLC Fluent Forms ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-93323 (The Dockerfile frontend loaded the Dockerfile and .dockerignore files  ...)
 	TODO: check
 CVE-2026-93322 (A malicious frontend can submit an LLB definition that causes buildkit ...)
@@ -35,9 +35,9 @@ CVE-2026-93317 (An unauthenticated attacker controlling a registry or OCI-layout
 CVE-2026-93316 (If BuildKit daemon is started with --cdi-disabled it can lead to daemo ...)
 	TODO: check
 CVE-2026-92931 (CWE-918: Server-Side Request Forgery in the Progress @progress/sitefin ...)
-	TODO: check
+	NOT-FOR-US: Progress Software
 CVE-2026-89039 (The convert_playwright_script prompt in the k6 MCP server accepts a fi ...)
-	TODO: check
+	NOT-FOR-US: Grafana
 CVE-2026-88424 (FineAdmin v1.0 was discovered to contain a SQL injection vulnerability ...)
 	TODO: check
 CVE-2026-88397 (ApiAdmin v.5.0 and before is vulnerable to SQL Injection in the user-l ...)
@@ -55,23 +55,23 @@ CVE-2026-88392 (Unimall v4 is vulnerable to Directory Traversal in FileUploadCon
 CVE-2026-88391 (Northstar (dromara/northstar, quantitative trading platform) <= 9.1.1  ...)
 	TODO: check
 CVE-2026-86671 (In Eclipse Che versions 7.29.0 and later, the GET `/api/scm/resolve` a ...)
-	TODO: check
+	NOT-FOR-US: Eclipse
 CVE-2026-79820 (A remote user validation failure vulnerability exists in HPE Integrate ...)
-	TODO: check
+	NOT-FOR-US: HPE
 CVE-2026-78413 (Velociraptor allows collection of VQL queries packaged into Artifacts  ...)
-	TODO: check
+	NOT-FOR-US: Rapid7
 CVE-2026-78412 (Velociraptor's WatchEvent gRPC API can specify the OrgId of the org fr ...)
-	TODO: check
+	NOT-FOR-US: Rapid7
 CVE-2026-78411 (Velociraptor's SetClientMetadata used the wrong permission check to en ...)
-	TODO: check
+	NOT-FOR-US: Rapid7
 CVE-2026-77805 (In Progress\xae Telerik\xae Fiddler\xae Classic for Windows, versions  ...)
-	TODO: check
+	NOT-FOR-US: Progress Software
 CVE-2026-77804 (In Progress\xae Telerik\xae Fiddler\xae Classic for Windows, versions  ...)
-	TODO: check
+	NOT-FOR-US: Progress Software
 CVE-2026-77803 (In Progress\xae Telerik\xae Fiddler\xae Classic for Windows, versions  ...)
-	TODO: check
+	NOT-FOR-US: Progress Software
 CVE-2026-77802 (In Progress\xae Telerik\xae Fiddler\xae Classic for Windows, versions  ...)
-	TODO: check
+	NOT-FOR-US: Progress Software
 CVE-2026-59788 (The email media type OAuth form passes the Authorization endpoint valu ...)
 	TODO: check
 CVE-2026-59787 (The Perl SNMP trap receiver script shipped with Zabbix does not proper ...)
@@ -85,73 +85,73 @@ CVE-2026-59783 (The Zabbix Server/Proxy has a vulnerability where binary items c
 CVE-2026-59782 (The JavaScript preprocessing (Duktape) engine on Zabbix server has a v ...)
 	TODO: check
 CVE-2026-58880 (In handle_app_val_response of btif_rc.cc, there is a possible way to a ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2026-58865 (In multiple functions of PduParser.java, there is a possible persisten ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2026-58859 (In multiple places, there is a possible  denial of service due to an u ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2026-58856 (In returnOutputBufferLocked of DeprecatedCamera3StreamSplitter.cpp, th ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2026-58854 (In multiple locations, there is a possible memory corruption due to ty ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2026-58841 (In multiple functions of VirtualAudioControllerTest.java, there is a p ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2026-58835 (In cfg2prop of btif_storage.cc, there is a possible out-of-bounds writ ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2026-58834 (In setPermissionGrantState of DevicePolicyManagerService.java, there i ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2026-58815 (In multiple locations, there is a possible out of bounds write due to  ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2026-55286 (In stpropnci_process of stpropnci.cc, there is a possible out of bound ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2026-55280 (In multiple locations, there is a possible out-of-bounds write due to  ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2026-55270 (In dialInternal in multiple locations, there is a possible permission  ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2026-55269 (In FilterCapturedPacket of snoop_logger.cc, there is a possible memory ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2026-55266 (In qsort of libufdt_sysdeps_vendor.c, there is a possible out-of-bound ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2026-55265 (In multiple functions of PduParser.java, there is a possible out of bo ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2026-49937 (In multiple functions of MessageQueueBase.h, there is a possible out o ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2026-49933 (In handle_le_monitor_device_event of msft.cc, there is a possible cont ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2026-49885 (In rw_t4t_update_file of rw_t4t.cc, there is a possible out-of-bounds  ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2026-49880 (In multiple functions of nfa_nfcee_act.cc, there is a possible out-of- ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2026-49878 (In wpas_handle_robust_av_scs_recv_action of robust_av.c, there is a po ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2026-45524 (In isSystem of WifiPermissionsUtil.java, there is a possible sandbox e ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2026-42700 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-39783 (Missing Authorization vulnerability in WP SYNTEX Polylang polylang all ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-39763 (Missing Authorization vulnerability in Deepak Anand WP Dummy Content G ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-39721 (Missing Authorization vulnerability in Brainstorm Force Starter Templa ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-37719 (An issue in dormakaba evolo Service (all versions) allows a remote att ...)
 	TODO: check
 CVE-2026-28667 (In multiple functions of rw_t5t.cc, there is a possible out-of-bounds  ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2026-28648 (In Settings, there is a possible permission bypass due to a confused d ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2026-28647 (In updateState of DeviceAdminAppsPreferenceController.java, there is a ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2026-28641 (In shouldDisableUninstallButton of ApplicationActionButtonsPreferenceC ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2026-28640 (In checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActiv ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2026-28625 (In multiple locations, there is a possible permission bypass due to a  ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2026-19185 (The system-call verifier for i3c_do_ccc() in drivers/i3c/i3c_handlers. ...)
-	TODO: check
+	NOT-FOR-US: Zephyr, different from src:zephyr
 CVE-2026-19184 (The NXP GAU ADC driver (drivers/adc/adc_mcux_gau_adc.c) validated the  ...)
-	TODO: check
+	NOT-FOR-US: Zephyr, different from src:zephyr
 CVE-2026-12171 (auto-changelog before 2.6.1 merges configuration from inside the targe ...)
 	TODO: check
 CVE-2026-105712 (gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted dat ...)
@@ -195,7 +195,7 @@ CVE-2026-105629 (Plane is an open-source project management tool. Prior to 1.4.0
 CVE-2026-105628 (Plane is an open-source project management tool. Prior to 1.4.0, Plane ...)
 	TODO: check
 CVE-2026-105421 (Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) f ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-105397 (LearnPress plugin for WordPress through 4.4.9.1 contains a stored cros ...)
 	TODO: check
 CVE-2026-105396 (Heym before v0.0.112 contains a token leakage vulnerability in build_p ...)
@@ -233,17 +233,17 @@ CVE-2026-105288 (A vulnerability has been found in feelec-yishu feelcrm-os 1.0.0
 CVE-2026-105287 (A flaw has been found in feelec-yishu feelcrm-os 1.0.0. Affected is an ...)
 	TODO: check
 CVE-2026-105286 (A vulnerability was detected in Totolink A3002MU 1.0.0-B20230403.1455. ...)
-	TODO: check
+	NOT-FOR-US: TOTOLINK
 CVE-2026-105285 (A security vulnerability has been detected in Totolink A3002MU 1.0.0-B ...)
-	TODO: check
+	NOT-FOR-US: TOTOLINK
 CVE-2026-105284 (A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.145 ...)
-	TODO: check
+	NOT-FOR-US: TOTOLINK
 CVE-2026-105263 (A security flaw has been discovered in Shaarli up to 0.16.3. The affec ...)
 	TODO: check
 CVE-2026-105254 (A vulnerability was identified in itsourcecode Online Admission System ...)
-	TODO: check
+	NOT-FOR-US: itsourcecode System
 CVE-2026-105253 (A vulnerability was determined in itsourcecode Online Admission System ...)
-	TODO: check
+	NOT-FOR-US: itsourcecode System
 CVE-2026-105251 (A vulnerability was detected in vgmstream up to r2117. Affected by thi ...)
 	TODO: check
 CVE-2026-105250 (A security vulnerability has been detected in vgmstream up to r2117. A ...)
@@ -253,23 +253,23 @@ CVE-2026-105249 (A weakness has been identified in vgmstream up to r2117. This i
 CVE-2026-105248 (A security flaw has been discovered in vgmstream up to r2117. This aff ...)
 	TODO: check
 CVE-2026-105247 (A vulnerability was determined in SourceCodester Online Reviewer Manag ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester
 CVE-2026-105073 (Exposure of Sensitive System Information to an Unauthorized Control Sp ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-105069 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-105068 (Insertion of Sensitive Information Into Sent Data vulnerability in Pix ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-105064 (Use of Externally-Controlled Input to Select Classes or Code ('Unsafe  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-105062 (Missing Authorization vulnerability in Brandtoss WP Admin Audit wp-adm ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-105060 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-105056 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-105055 (Missing Authorization vulnerability in WP Mailster WP Mailster wp-mail ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-104979 (Plane is an open-source project management tool. Prior to 1.4.0, Intak ...)
 	TODO: check
 CVE-2026-104978 (Plane is an open-source project management tool. Prior to 1.4.0, Plane ...)
@@ -339,43 +339,43 @@ CVE-2026-104806 (DigitalCanion has discovered a path traversal vulnerability tha
 CVE-2026-104805 (DigitalCanion has discovered a vulnerability in the backup restoration ...)
 	TODO: check
 CVE-2026-104714 (Concurrent execution using shared resource with improper synchronizati ...)
-	TODO: check
+	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-104713 (Allocation of resources without limits or throttling vulnerability in  ...)
-	TODO: check
+	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-104712 (Asymmetric resource consumption (amplification) vulnerability in Apach ...)
-	TODO: check
+	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-104711 (Improper neutralization of special elements used in an expression lang ...)
-	TODO: check
+	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-104706 (DigitalCanion has discovered a path traversal vulnerability that allow ...)
 	TODO: check
 CVE-2026-104675 (Missing Authorization vulnerability in Liquid Web / StellarWP Event Ti ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-104673 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-104409 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-104408 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-104407 (Cross-Site Request Forgery (CSRF) vulnerability in Blubrry Podcasting  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-104404 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-104401 (Exposure of Sensitive System Information to an Unauthorized Control Sp ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-104400 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-104397 (Missing Authorization vulnerability in Jeroen Peters Name Directory na ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-104396 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-104389 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-104388 (Missing Authorization vulnerability in Blubrry Podcasting PowerPress P ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-104386 (Missing Authorization vulnerability in WPFunnels Team WP VR wpvr allow ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-103684 (Missing Authorization vulnerability in Arraytics WP Event Solution wp- ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-103512 (Perforce P4 Search prior to 2026.4.2 trusts a client-supplied address  ...)
 	TODO: check
 CVE-2026-103511 (Perforce P4 Search prior to 2026.4.2 does notvalidatefile names suppli ...)
@@ -385,49 +385,49 @@ CVE-2026-103510 (P4 Search prior to 2026.4.2 does not fail securely when its ser
 CVE-2026-103507 (Perforce P4 Search prior to 2026.4.2 does not restrict file paths writ ...)
 	TODO: check
 CVE-2026-103352 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-103351 (Improper Validation of Specified Quantity in Input vulnerability in Ma ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-103349 (Deserialization of Untrusted Data vulnerability in Rymera Web Co Produ ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-103335 (Insertion of Sensitive Information Into Sent Data vulnerability in Dee ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-103334 (Insertion of Sensitive Information Into Sent Data vulnerability in Eto ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-103086 (Missing Authorization vulnerability in Stiofan UsersWP userswp allows  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-103085 (Improper Access Control vulnerability in WP User Manager WP User Manag ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-103084 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-103079 (Authorization Bypass Through User-Controlled Key vulnerability in Ahma ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-103078 (Authorization Bypass Through User-Controlled Key vulnerability in Ahma ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-102914 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-102780 (Joomla Extension - joomlafry.com - Unauthenticated cross-record public ...)
-	TODO: check
+	NOT-FOR-US: Joomla
 CVE-2026-102779 (Joomla Extension - joomlafry.com - Unauthenticated forced execution of ...)
-	TODO: check
+	NOT-FOR-US: Joomla
 CVE-2026-102778 (Joomla Extension - svenbluege.de - Cross-site scripting and open redir ...)
-	TODO: check
+	NOT-FOR-US: Joomla
 CVE-2026-102777 (Joomla Extension - svenbluege.de - Server-side request forgery in the  ...)
-	TODO: check
+	NOT-FOR-US: Joomla
 CVE-2026-102776 (Joomla Extension - svenbluege.de - Cross-site request forgery of list  ...)
-	TODO: check
+	NOT-FOR-US: Joomla
 CVE-2026-102775 (Joomla Extension - phoca.cz - Authorisation bypass through user-contro ...)
-	TODO: check
+	NOT-FOR-US: Joomla
 CVE-2026-102576 (A flaw was found in Quay. A remote attacker could trick a user into lo ...)
 	TODO: check
 CVE-2026-102428 (Joomla Extension - ordasoft.com - Unauthenticated SQL injection in Ord ...)
-	TODO: check
+	NOT-FOR-US: Joomla
 CVE-2026-102426 (Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Conte ...)
-	TODO: check
+	NOT-FOR-US: Joomla
 CVE-2026-102393 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-102383 (Missing Authorization vulnerability in VillaTheme Lookzy woo-lookbook  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-102295 (A flaw was found in Quay. A cross-site scripting (XSS) vulnerability i ...)
 	TODO: check
 CVE-2026-102282 (adm-zip is a JavaScript library for creating and extracting ZIP archiv ...)
@@ -435,15 +435,15 @@ CVE-2026-102282 (adm-zip is a JavaScript library for creating and extracting ZIP
 CVE-2026-101919 (A flaw was found in the HyperShift operator. The operator copies user- ...)
 	TODO: check
 CVE-2026-100515 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-100509 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-100103 (Perforce P4 Search container images prior to 2026.4.2 reset the servic ...)
 	TODO: check
 CVE-2026-100102 (Perforce P4 Search container images prior to 2026.4.2enablean unauthen ...)
 	TODO: check
 CVE-2025-15643 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-XXXX [OSSN-0112]
 	- gnocchi 4.7.0-7 (bug #1150009)
 	NOTE: https://github.com/gnocchixyz/gnocchi/security/advisories/GHSA-cjq3-6hm7-q33w



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6c4cd113833b86e473a9807ec8c8a64bd71c46bd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6c4cd113833b86e473a9807ec8c8a64bd71c46bd
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261005/aad0ad8c/attachment.htm>


More information about the debian-security-tracker-commits mailing list