[Git][security-tracker-team/security-tracker][master] Process more NFUs

Tue Oct 6 21:47:48 BST 2026


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
422aa59f by Salvatore Bonaccorso at 2026-10-06T22:38:01+02:00
Process more NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -999,21 +999,21 @@ CVE-2026-105805 (Payload is a free and open source headless content management s
 CVE-2026-105804 (Payload is a free and open source headless content management system.  ...)
 	NOT-FOR-US: Payload CMS
 CVE-2026-105801 (openapi-python-client generates Python clients from OpenAPI documents. ...)
-	TODO: check
+	NOT-FOR-US: openapi-python-client
 CVE-2026-105800 (i18next-http-backend is a backend layer for i18next that loads transla ...)
 	TODO: check
 CVE-2026-105799 (LangChain is a framework for building LLM-powered applications. Prior  ...)
-	TODO: check
+	NOT-FOR-US: LangChain
 CVE-2026-105798 (SimpleChat is a secure AI conversation application with personal and g ...)
-	TODO: check
+	NOT-FOR-US: SimpleChat
 CVE-2026-105797 (SimpleChat is a secure AI conversation application with personal and g ...)
-	TODO: check
+	NOT-FOR-US: SimpleChat
 CVE-2026-105796 (Kiota is an OpenAPI based HTTP Client code generator. From 0.5.0 until ...)
-	TODO: check
+	NOT-FOR-US: Kiota
 CVE-2026-105795 (Kiota is an OpenAPI based HTTP Client code generator. From 1.25.1 unti ...)
-	TODO: check
+	NOT-FOR-US: Kiota
 CVE-2026-105794 (MsQuic is a cross-platform C implementation of the IETF QUIC protocol  ...)
-	TODO: check
+	NOT-FOR-US: MsQuic
 CVE-2026-105793 (Microsoft UFO is an open-source framework for intelligent automation a ...)
 	NOT-FOR-US: Microsoft UFO
 CVE-2026-105792 (Microsoft UFO is an open-source framework for intelligent automation a ...)
@@ -1051,7 +1051,7 @@ CVE-2026-104945 (TP-Link Tapo C500 v2.0 contains an out-of-bounds stack write vu
 CVE-2026-104944 (TP-Link Tapo C500 v2.0 contains an out-of-bounds function-pointer disp ...)
 	NOT-FOR-US: TPLink
 CVE-2026-104850 (MCP TypeScript SDK is the official TypeScript SDK for Model Context Pr ...)
-	TODO: check
+	NOT-FOR-US: MCP TypeScript SDK
 CVE-2026-104814 (Unauthenticated Cross Site Scripting (XSS) in Form Block <= 1.8.1 vers ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-104757 (Editor Privilege Escalation in Import and export users and customers < ...)
@@ -1079,11 +1079,11 @@ CVE-2026-104385 (Unauthenticated Sensitive Data Exposure in Groundhogg <= 4.8.3
 CVE-2026-104073 (NetBox versions 2.9.5 before 4.7.0 contain a server-side template inje ...)
 	TODO: check
 CVE-2026-104070 (The Crayons plugin for SPIP before 3.5.0 contains a missing authorizat ...)
-	TODO: check
+	NOT-FOR-US: Crayons plugin for SPIP
 CVE-2026-104069 (HortusFox before 6.2 contains a remote code execution vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: HortusFox
 CVE-2026-103831 (CVE-2026-103831: Insecure deserialization vulnerability in the Psr16Ca ...)
-	TODO: check
+	NOT-FOR-US: TrueLayer Magento 2 Plugin
 CVE-2026-103778 (Dell Command | Configure (DCC), versions prior to 5.2.3.35 contain a U ...)
 	NOT-FOR-US: Dell / EMC
 CVE-2026-103620 (A missing authorization vulnerability was identified in GitHub Enterpr ...)
@@ -1103,13 +1103,13 @@ CVE-2026-100518 (Unauthenticated Broken Authentication in Advanced Google reCAPT
 CVE-2026-0198 (In is_pd_allowed of gem_msg.c, there is a possible permission bypass d ...)
 	NOT-FOR-US: Google devices
 CVE-2025-8352 (Allocation of resources without limits or throttling vulnerability in  ...)
-	TODO: check
+	NOT-FOR-US: ESET
 CVE-2025-71384 (Dbit WIFI4 N300 1.0.0 devices allows administrators (from the local Wi ...)
-	TODO: check
+	NOT-FOR-US: Dbit
 CVE-2025-71383 (Dbit WIFI4 N300 1.0.0 devices allow the management interface to be cra ...)
-	TODO: check
+	NOT-FOR-US: Dbit
 CVE-2025-45871 (LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL i ...)
-	TODO: check
+	NOT-FOR-US: LogicalDOC Enterprise
 CVE-2025-15591 (Cross-site Scripting (XSS) in the Forums feature of OpenText Content M ...)
 	NOT-FOR-US: OpenText
 CVE-2026-77050 (An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9,  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/422aa59f1708ad1a424a8d2ddfbf1fc09cd01c13

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/422aa59f1708ad1a424a8d2ddfbf1fc09cd01c13
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261006/4866d913/attachment.htm>
