[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sun Oct 11 20:15:24 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
487041b4 by security tracker role at 2026-10-11T19:15:16+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,27 +1,27 @@
CVE-2026-59508 (Improper neutralization of special elements used in an SQL command ('S ...)
TODO: check
CVE-2026-19935 (The Bluetooth LE host queues received L2CAP connection-oriented channe ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-19740 (The Link Layer Control Procedure (LLCP) implementation of the Zephyr s ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-19739 (The Bluetooth Link Layer control procedure code in subsys/bluetooth/co ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-19738 (The Bluetooth Link Layer Control Procedure (LLCP) implementation for C ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-19737 (i2s_esp32_trigger_check() in drivers/i2s/i2s_esp32.c validates the req ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-19736 (The NXP MCUX TRNG entropy driver in drivers/entropy/entropy_mcux_trng. ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-19735 (The RFC 6528 initial-sequence-number implementation in subsys/net/ip/t ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-19669 (The user-mode syscall verifiers z_vrfy_fuel_gauge_get_props() and z_vr ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-19577 (net_route_ipv6_packet() in subsys/net/ip/route_ipv6.c resolved the nex ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-19576 (The Goodix GT9xx input driver in drivers/input/input_gt911.c reads the ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-18418 (The zbus proxy agent IPC backend in subsys/zbus/proxy_agent/zbus_proxy ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-108925 (Improper neutralization of Script-Related HTML tags in a web page (bas ...)
TODO: check
CVE-2026-108913 (omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via ...)
@@ -35,53 +35,53 @@ CVE-2026-108903 (pH7Builder (pH7 Social Dating CMS) before 19.3.0 contains a CAP
CVE-2026-108902 (pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path trave ...)
TODO: check
CVE-2026-108891 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108888 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108887 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108886 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108885 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108884 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108883 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108882 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108881 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108880 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108879 (JeecgBoot through 3.9.5 contains an insecure direct object reference v ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108878 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108877 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108876 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108875 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108874 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108873 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108872 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108871 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108870 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108869 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108868 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108867 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108866 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108865 (AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerab ...)
TODO: check
CVE-2026-108864 (iFlytek Astron Agent through 1.1.2 contains an insecure direct object ...)
@@ -111,7 +111,7 @@ CVE-2026-108853 (UnicomAI Wanwu before 0.6.3 contains an insecure direct object
CVE-2026-108852 (Deep Chat through 2.5.1 contains a cross-site scripting vulnerability ...)
TODO: check
CVE-2026-108851 (phpMyFAQ through 4.1.10 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: phpMyFAQ
CVE-2026-108850 (Company Research Agent through 2.2.0 contains a server-side request fo ...)
TODO: check
CVE-2026-108839 (thClaws through 0.141.0 contains a link-following vulnerability in the ...)
@@ -125,7 +125,7 @@ CVE-2026-108759 (mistral.rs 0.9.0 through 0.9.4 contains a link following vulner
CVE-2026-108758 (Easy!Appointments through 1.6.0 contains an authorization bypass vulne ...)
TODO: check
CVE-2026-108757 (Nexting pinclaw OpenClaw channel plugin through 0.3.0 contains a missi ...)
- TODO: check
+ NOT-FOR-US: OpenClaw
CVE-2026-108756 (Abilityai Trinity through 0.9.5 contains a missing authorization vulne ...)
TODO: check
CVE-2026-108755 (Hatchet through 0.110.5 contains an allocation of resources without li ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/487041b47be94141d58a0954b48068c7715eef6b
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/487041b47be94141d58a0954b48068c7715eef6b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261011/49391800/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list