[Git][security-tracker-team/security-tracker][master] Process more NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ce6969d7 by Salvatore Bonaccorso at 2026-10-06T22:27:48+02:00
Process more NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -899,17 +899,17 @@ CVE-2026-105985 (Craft CMS 5.10.13.2 contains an authenticated remote code execu
 CVE-2026-105957 (A vulnerability was detected in SourceCodester Performance Indicator S ...)
 	NOT-FOR-US: SourceCodester
 CVE-2026-105950 (A security vulnerability has been detected in getformwork formwork up  ...)
-	TODO: check
+	NOT-FOR-US: getformwork formwork
 CVE-2026-105922 (A security flaw has been discovered in vllm-project vLLM up to 0.31.0. ...)
 	TODO: check
 CVE-2026-105921 (A vulnerability was identified in Kusalkasilva Learning-Management-Sys ...)
-	TODO: check
+	NOT-FOR-US: Kusalkasilva Learning-Management-System
 CVE-2026-105920 (A vulnerability was determined in Kusalkasilva Learning-Management-Sys ...)
-	TODO: check
+	NOT-FOR-US: Kusalkasilva Learning-Management-System
 CVE-2026-105919 (A vulnerability was found in Kusalkasilva Learning-Management-System u ...)
-	TODO: check
+	NOT-FOR-US: Kusalkasilva Learning-Management-System
 CVE-2026-105918 (A vulnerability has been found in Kusalkasilva Learning-Management-Sys ...)
-	TODO: check
+	NOT-FOR-US: Kusalkasilva Learning-Management-System
 CVE-2026-105879 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-105868 (Payload is a free and open source headless content management system.  ...)
@@ -981,11 +981,11 @@ CVE-2026-105837 (libmikmod before 3.3.14 contains an integer overflow vulnerabil
 	- libmikmod 3.3.14-1
 	NOTE: Fixed by: https://github.com/sezero/mikmod/commit/a125eabbd086f311496ae46d08aaebcad0a1c426 (libmikmod-3.3.14)
 CVE-2026-105836 (QloApps through 1.7.0 contains an authorization bypass vulnerability i ...)
-	TODO: check
+	NOT-FOR-US: QloApps
 CVE-2026-105835 (PLANKA 2.2.0 through 2.2.1 fails to limit incorrect TOTP codes submitt ...)
-	TODO: check
+	NOT-FOR-US: PLANKA
 CVE-2026-105834 (Rundeck before 6.2.0 contains a path traversal vulnerability that allo ...)
-	TODO: check
+	NOT-FOR-US: Rundeck
 CVE-2026-105809 (A vulnerability was identified in SourceCodester Simple Student Inform ...)
 	NOT-FOR-US: SourceCodester
 CVE-2026-105808 (A vulnerability was determined in SourceCodester Simple Student Inform ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ce6969d7277e4c8b73d0b9a5c1759456cbef63f4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ce6969d7277e4c8b73d0b9a5c1759456cbef63f4
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261006/d1b0f8d5/attachment.htm>