[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
91ca7a89 by Salvatore Bonaccorso at 2026-10-06T22:12:36+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -837,55 +837,55 @@ CVE-2026-106121 (The RabbitMQ Java client library allows Java and JVM-based appl
 	NOTE: https://github.com/rabbitmq/rabbitmq-java-client/pull/2100
 	NOTE: Fixed by: https://github.com/rabbitmq/rabbitmq-java-client/commit/25fad817291feff3195c32620117d295598f8b41 (v5.37.0)
 CVE-2026-106120 (LiquidJS is a Shopify / GitHub Pages compatible template engine in pur ...)
-	TODO: check
+	NOT-FOR-US: LiquidJS
 CVE-2026-106119 (LangChain is a framework for building LLM-powered applications. Prior  ...)
-	TODO: check
+	NOT-FOR-US: LangChain
 CVE-2026-106118 (ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, tiled TIF ...)
-	TODO: check
+	NOT-FOR-US: ImageSharp
 CVE-2026-106117 (ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, decoding  ...)
-	TODO: check
+	NOT-FOR-US: ImageSharp
 CVE-2026-106116 (ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, ExifReade ...)
-	TODO: check
+	NOT-FOR-US: ImageSharp
 CVE-2026-106115 (ImageSharp is a 2D graphics library. From 2.1.0 until 4.1.2, the TIFF  ...)
-	TODO: check
+	NOT-FOR-US: ImageSharp
 CVE-2026-106114 (ImageSharp is a 2D graphics library. From 1.0.0-beta0001 until 4.1.2,  ...)
-	TODO: check
+	NOT-FOR-US: ImageSharp
 CVE-2026-106113 (ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, decoding  ...)
-	TODO: check
+	NOT-FOR-US: ImageSharp
 CVE-2026-106112 (ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ICC LUT16 ...)
-	TODO: check
+	NOT-FOR-US: ImageSharp
 CVE-2026-106111 (ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ExrBaseDe ...)
-	TODO: check
+	NOT-FOR-US: ImageSharp
 CVE-2026-106110 (ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, the TIFF  ...)
-	TODO: check
+	NOT-FOR-US: ImageSharp
 CVE-2026-106109 (Quasar Framework is a framework for building high-performance Vue.js u ...)
-	TODO: check
+	NOT-FOR-US: Quasar Framework
 CVE-2026-106107 (Quasar Framework is a framework for building high-performance Vue.js u ...)
-	TODO: check
+	NOT-FOR-US: Quasar Framework
 CVE-2026-106106 (Quasar Framework is a framework for building high-performance Vue.js u ...)
-	TODO: check
+	NOT-FOR-US: Quasar Framework
 CVE-2026-106105 (Quasar Framework is a framework for building high-performance Vue.js u ...)
-	TODO: check
+	NOT-FOR-US: Quasar Framework
 CVE-2026-106104 (Quasar Framework is a framework for building high-performance Vue.js u ...)
-	TODO: check
+	NOT-FOR-US: Quasar Framework
 CVE-2026-106103 (Quasar Framework is a framework for building high-performance Vue.js u ...)
-	TODO: check
+	NOT-FOR-US: Quasar Framework
 CVE-2026-106102 (Quasar Framework is a framework for building high-performance Vue.js u ...)
-	TODO: check
+	NOT-FOR-US: Quasar Framework
 CVE-2026-106101 (Quasar Framework is a framework for building high-performance Vue.js u ...)
-	TODO: check
+	NOT-FOR-US: Quasar Framework
 CVE-2026-106100 (Payload is a free and open source headless content management system.  ...)
-	TODO: check
+	NOT-FOR-US: Payload CMS
 CVE-2026-106041 (Mooncake Store master through 0.3.13.post1 contains a missing authoriz ...)
-	TODO: check
+	NOT-FOR-US: Mooncake Store
 CVE-2026-106040 (Mooncake Store master through 0.3.13.post1 contains a missing authoriz ...)
-	TODO: check
+	NOT-FOR-US: Mooncake Store
 CVE-2026-106039 (Mooncake Store master through 0.3.13.post1 contains a missing authoriz ...)
-	TODO: check
+	NOT-FOR-US: Mooncake Store
 CVE-2026-106038 (Mooncake Store master through 0.3.13.post1 contains a missing authenti ...)
-	TODO: check
+	NOT-FOR-US: Mooncake Store
 CVE-2026-106037 (Mooncake through 0.3.13.post1 contains a missing authentication vulner ...)
-	TODO: check
+	NOT-FOR-US: Mooncake
 CVE-2026-106033 (A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the Ans ...)
 	TODO: check
 CVE-2026-106026 (tftp-hpa 5.4 before 6.0 contains an out-of-bounds read vulnerability i ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/91ca7a89134461b2da62556cf626d2140619ae67

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/91ca7a89134461b2da62556cf626d2140619ae67
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261006/a4436cd5/attachment.htm>