[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b3bcd9de by Salvatore Bonaccorso at 2026-10-13T07:45:21+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,7 +1,7 @@
 CVE-2026-9191 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
 	NOT-FOR-US: Progress Software
 CVE-2026-96618 (Improper Handling of Highly Compressed Data (Data Amplification) vulne ...)
-	TODO: check
+	NOT-FOR-US: hexpm (server side)
 CVE-2026-96612 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
 	TODO: check
 CVE-2026-94451 (Quarkus REST Data Panache provides a way to automatically generate RES ...)
@@ -15,9 +15,9 @@ CVE-2026-93693 (In Progress ShareFile Storage Zones Controller v5.12.6 and below
 CVE-2026-92877 (The JAXB factory methods historically relied solely on `FEATURE_SECURE ...)
 	TODO: check
 CVE-2026-92682 (In @neo4j/graphql versions from 7.0.0 up to but not including 7.6.4, t ...)
-	TODO: check
+	NOT-FOR-US: neo4j/graphql
 CVE-2026-92681 (In @neo4j/graphql versions up to and including 7.6.3, @authentication  ...)
-	TODO: check
+	NOT-FOR-US: neo4j/graphql
 CVE-2026-89140 (Temporal Server does not bind internal completion callbacks to the nam ...)
 	NOT-FOR-US: Temporal Technologies
 CVE-2026-87744 (A flaw was found in Quarkus REST Data Panache. This vulnerability allo ...)
@@ -87,7 +87,7 @@ CVE-2026-85499 (Improper Authorization vulnerability in Apache SkyWalking Banyan
 CVE-2026-85471 (A flaw was found in Quay. An authenticated repository administrator co ...)
 	NOT-FOR-US: Red Hat software not packaged in Debian
 CVE-2026-84286 (ExLlamaV3\u2019s EXL3 loader uses an untrusted, model-supplied index t ...)
-	TODO: check
+	NOT-FOR-US: ExLlamaV3's EXL3 loader
 CVE-2026-83536 (A flaw was found in openstack-network-exporter. The HTTP server within ...)
 	TODO: check
 CVE-2026-83535 (A flaw was found in openstack-network-exporter. When an operator confi ...)
@@ -109,13 +109,13 @@ CVE-2026-6232 (An out-of-bounds write vulnerability in the SPI host command inte
 CVE-2026-68764
 	REJECTED
 CVE-2026-65954 (PHPCSUtils is a suite of utility functions for use with PHP_CodeSniffe ...)
-	TODO: check
+	NOT-FOR-US: PHPCSUtils
 CVE-2026-61994 (Missing Authorization vulnerability in RocketGeek WP-Members wp-member ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-59977 (ConvertX is a self-hosted file conversion service. Prior to 0.18.0, th ...)
-	TODO: check
+	NOT-FOR-US: ConvertX
 CVE-2026-59976 (ConvertX is a self-hosted file conversion service. Prior to 0.18.0, th ...)
-	TODO: check
+	NOT-FOR-US: ConvertX
 CVE-2026-57143 (PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6. ...)
 	NOT-FOR-US: PraisonAI
 CVE-2026-57118 (PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6. ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b3bcd9deeeda69cabc6830d6bba06f5bf81a071b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b3bcd9deeeda69cabc6830d6bba06f5bf81a071b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261013/052d1e56/attachment.htm>