[Git][security-tracker-team/security-tracker][master] Process more NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Oct 9 10:01:22 BST 2026 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
dd22e0ad by Salvatore Bonaccorso at 2026-10-09T11:01:06+02:00
Process more NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -410,13 +410,13 @@ CVE-2026-107793 (Jivejdon through 5.0 contains an authorization bypass vulnerabi
 CVE-2026-107792 (Jivejdon from commit d58a36b0 through commit ee67a65e contains a missi ...)
 	NOT-FOR-US: Jivejdon
 CVE-2026-107782 (System Informer before 4.0.26241.138 contains an incorrect authorizati ...)
-	TODO: check
+	NOT-FOR-US: System Informer
 CVE-2026-107781 (Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 ...)
-	TODO: check
+	NOT-FOR-US: Dromara Skyeye
 CVE-2026-107780 (Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 ...)
-	TODO: check
+	NOT-FOR-US: Dromara Skyeye
 CVE-2026-107779 (Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 ...)
-	TODO: check
+	NOT-FOR-US: Dromara Skyeye
 CVE-2026-107778 (MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereferen ...)
 	- krb5 <unfixed>
 	NOTE: https://github.com/krb5/krb5/pull/1511
@@ -443,54 +443,54 @@ CVE-2026-107730 (SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298
 CVE-2026-107729 (SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, src/M ...)
 	NOT-FOR-US: SumatraPDF
 CVE-2026-107728 (Strawberry GraphQL is a library for creating GraphQL APIs. From 0.217. ...)
-	TODO: check
+	NOT-FOR-US: Strawberry GraphQL
 CVE-2026-107727 (Strawberry GraphQL is a library for creating GraphQL APIs. From 0.312. ...)
-	TODO: check
+	NOT-FOR-US: Strawberry GraphQL
 CVE-2026-107726 (Hazelcast is a unified real-time data platform combining stream proces ...)
 	TODO: check
 CVE-2026-107725 (Hazelcast is a unified real-time data platform combining stream proces ...)
 	TODO: check
 CVE-2026-107724 (fast-jwt provides fast JSON Web Token (JWT) implementation. In 6.2.4,  ...)
-	TODO: check
+	NOT-FOR-US: fast-jwt
 CVE-2026-107723 (fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6 ...)
-	TODO: check
+	NOT-FOR-US: fast-jwt
 CVE-2026-107722 (fast-jwt provides fast JSON Web Token (JWT) implementation. From 6.2.0 ...)
-	TODO: check
+	NOT-FOR-US: fast-jwt
 CVE-2026-107721 (fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6 ...)
-	TODO: check
+	NOT-FOR-US: fast-jwt
 CVE-2026-107720 (fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6 ...)
-	TODO: check
+	NOT-FOR-US: fast-jwt
 CVE-2026-107719 (fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6 ...)
-	TODO: check
+	NOT-FOR-US: fast-jwt
 CVE-2026-107718 (AdonisJS HTTP Server is a package for handling HTTP requests in the Ad ...)
-	TODO: check
+	NOT-FOR-US: AdonisJS HTTP Server
 CVE-2026-107717 (Banks generates meaningful LLM prompts using a simple template languag ...)
-	TODO: check
+	NOT-FOR-US: Banks
 CVE-2026-107716 (Banks generates meaningful LLM prompts using a simple template languag ...)
-	TODO: check
+	NOT-FOR-US: Banks
 CVE-2026-107715 (The Mechanize library is used for automating interaction with websites ...)
 	TODO: check
 CVE-2026-107714 (The Mechanize library is used for automating interaction with websites ...)
 	TODO: check
 CVE-2026-107709 (A path traversal vulnerability exists in Bower decompress-zip through  ...)
-	TODO: check
+	NOT-FOR-US: Bower decompress-zip
 CVE-2026-107708 (MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerabil ...)
 	- krb5 <unfixed>
 	NOTE: https://github.com/krb5/krb5/pull/1510
 	NOTE: Fixed by: https://github.com/krb5/krb5/commit/f6e2c397ceda6467ebbaab8ed66d4895c9f1d6a7 (master)
 	NOTE: Fixed by: https://github.com/krb5/krb5/commit/a88a18cafa1040a0c4f9c8d08288fc98831ec86d (krb5-1.22 branch)
 CVE-2026-107707 (Intego Antivirus for Windows through 3.0.0.1 contains a link following ...)
-	TODO: check
+	NOT-FOR-US: Intego Antivirus for Windows
 CVE-2026-107706 (Dolibarr ERP CRM before 24.0.2 contains an incorrect authorization vul ...)
 	NOT-FOR-US: Dolibarr
 CVE-2026-107705 (Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow  ...)
 	TODO: check
 CVE-2026-107704 (The image_optimizer Ruby gem 1.3.0 through 1.9.0 contains an OS comman ...)
-	TODO: check
+	NOT-FOR-US: mage_optimizer Ruby gem
 CVE-2026-107703 (@enmaso/node-convert through 1.0.0 contains an OS command injection vu ...)
-	TODO: check
+	NOT-FOR-US: enmaso/node-convert
 CVE-2026-107702 (QloApps through 1.7.0 contains an authorization bypass vulnerability i ...)
-	TODO: check
+	NOT-FOR-US: QloApps
 CVE-2026-107701 (dot-access through 1.0.0 contains a prototype pollution vulnerability  ...)
 	TODO: check
 CVE-2026-107700 (dot-access 0.0.3 through 1.0.0 contains a code injection vulnerability ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dd22e0adedf8202d0f65c253640393cbfe296d7f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dd22e0adedf8202d0f65c253640393cbfe296d7f
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261009/505e766c/attachment-0001.htm>

More information about the debian-security-tracker-commits mailing list