[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e9f539ca by Salvatore Bonaccorso at 2026-10-05T21:39:23+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -135,7 +135,7 @@ CVE-2026-39763 (Missing Authorization vulnerability in Deepak Anand WP Dummy Con
 CVE-2026-39721 (Missing Authorization vulnerability in Brainstorm Force Starter Templa ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-37719 (An issue in dormakaba evolo Service (all versions) allows a remote att ...)
-	TODO: check
+	NOT-FOR-US: dormakaba
 CVE-2026-28667 (In multiple functions of rw_t5t.cc, there is a possible out-of-bounds  ...)
 	NOT-FOR-US: Android
 CVE-2026-28648 (In Settings, there is a possible permission bypass due to a confused d ...)
@@ -153,7 +153,7 @@ CVE-2026-19185 (The system-call verifier for i3c_do_ccc() in drivers/i3c/i3c_han
 CVE-2026-19184 (The NXP GAU ADC driver (drivers/adc/adc_mcux_gau_adc.c) validated the  ...)
 	NOT-FOR-US: Zephyr, different from src:zephyr
 CVE-2026-12171 (auto-changelog before 2.6.1 merges configuration from inside the targe ...)
-	TODO: check
+	NOT-FOR-US: auto-changelog
 CVE-2026-105712 (gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted dat ...)
 	- gnupg2 <unfixed>
 	NOTE: https://static.dev.gnupg.org/T8159.html
@@ -170,53 +170,53 @@ CVE-2026-105643 (Ghost is a Node.js content management system. From version 6.34
 CVE-2026-105642 (Ghost is a Node.js content management system. From 6.56.0 until 6.67.0 ...)
 	- ghost <itp> (bug #892150)
 CVE-2026-105641 (Plane is an open-source project management tool. Prior to 1.4.0, the d ...)
-	TODO: check
+	NOT-FOR-US: Plane
 CVE-2026-105640 (Plane is an open-source project management tool. Prior to 1.4.0, Plane ...)
-	TODO: check
+	NOT-FOR-US: Plane
 CVE-2026-105639 (Plane is an open-source project management tool. Prior to 1.4.0, Plane ...)
-	TODO: check
+	NOT-FOR-US: Plane
 CVE-2026-105638 (Plane is an open-source project management tool. Prior to 1.4.0, Plane ...)
-	TODO: check
+	NOT-FOR-US: Plane
 CVE-2026-105637 (Plane is an open-source project management tool. Prior to 1.4.0, Proje ...)
-	TODO: check
+	NOT-FOR-US: Plane
 CVE-2026-105636 (Plane is an open-source project management tool. Prior to 1.4.0, the w ...)
-	TODO: check
+	NOT-FOR-US: Plane
 CVE-2026-105635 (Plane is an open-source project management tool. Prior to 1.4.0, Proje ...)
-	TODO: check
+	NOT-FOR-US: Plane
 CVE-2026-105634 (Plane is an open-source project management tool. Prior to 1.3.0, the P ...)
-	TODO: check
+	NOT-FOR-US: Plane
 CVE-2026-105633 (Plane is an open-source project management tool. Prior to 1.4.0, the V ...)
-	TODO: check
+	NOT-FOR-US: Plane
 CVE-2026-105632 (Plane is an open-source project management tool. Prior to 1.4.0, the G ...)
-	TODO: check
+	NOT-FOR-US: Plane
 CVE-2026-105631 (Plane is an open-source project management tool. Prior to 1.4.0, Works ...)
-	TODO: check
+	NOT-FOR-US: Plane
 CVE-2026-105630 (Plane is an open-source project management tool. Prior to 1.4.0, an au ...)
-	TODO: check
+	NOT-FOR-US: Plane
 CVE-2026-105629 (Plane is an open-source project management tool. Prior to 1.4.0, BulkE ...)
-	TODO: check
+	NOT-FOR-US: Plane
 CVE-2026-105628 (Plane is an open-source project management tool. Prior to 1.4.0, Plane ...)
-	TODO: check
+	NOT-FOR-US: Plane
 CVE-2026-105421 (Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) f ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-105397 (LearnPress plugin for WordPress through 4.4.9.1 contains a stored cros ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-105396 (Heym before v0.0.112 contains a token leakage vulnerability in build_p ...)
-	TODO: check
+	NOT-FOR-US: Heym
 CVE-2026-105387 (A security flaw has been discovered in girishsaraf Online-Appointment- ...)
-	TODO: check
+	NOT-FOR-US: girishsaraf Online-Appointment-Booking-System
 CVE-2026-105386 (A vulnerability was identified in onetwothreeneth HospitalManagementSy ...)
-	TODO: check
+	NOT-FOR-US: onetwothreeneth HospitalManagementSystem
 CVE-2026-105385 (A vulnerability was determined in onetwothreeneth HospitalManagementSy ...)
-	TODO: check
+	NOT-FOR-US: onetwothreeneth HospitalManagementSystem
 CVE-2026-105384 (A vulnerability was found in UNION HospitalManagementSystem up to 9ef9 ...)
-	TODO: check
+	NOT-FOR-US: UNION HospitalManagementSystem
 CVE-2026-105383 (A vulnerability has been found in onetwothreeneth HospitalManagementSy ...)
-	TODO: check
+	NOT-FOR-US: onetwothreeneth HospitalManagementSystem
 CVE-2026-105382 (A flaw has been found in onetwothreeneth HospitalManagementSystem up t ...)
-	TODO: check
+	NOT-FOR-US: onetwothreeneth HospitalManagementSystem
 CVE-2026-105329 (A vulnerability was determined in TallCMS up to 4.8.0. This affects an ...)
-	TODO: check
+	NOT-FOR-US: TallCMS
 CVE-2026-105326 (An argument injection flaw was found in CUPS. When email notification  ...)
 	TODO: check
 CVE-2026-105315 (A vulnerability has been found in django-haystack up to 3.3.0. Affecte ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e9f539cac85a0724d0172624507f1f6038e01b13

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e9f539cac85a0724d0172624507f1f6038e01b13
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261005/0be4dacc/attachment-0001.htm>