[Git][security-tracker-team/security-tracker][master] Process more NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8928c9b7 by Salvatore Bonaccorso at 2026-10-13T08:36:14+02:00
Process more NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -135,13 +135,13 @@ CVE-2026-42689 (Concurrent Execution using Shared Resource with Improper Synchro
 CVE-2026-1907 (A SQL Injection (SQLi) affects the Kong Gateway (Enterprise and Open S ...)
 	NOT-FOR-US: Kong
 CVE-2026-18390 (Improper neutralization of special elements used in an OS command ('OS ...)
-	TODO: check
+	NOT-FOR-US: UYAP Document Editor
 CVE-2026-18166 (IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UN ...)
 	NOT-FOR-US: IBM
 CVE-2026-12613 (Deserialization of untrusted data vulnerability in Ministry of Justice ...)
-	TODO: check
+	NOT-FOR-US: UYAP Document Editor
 CVE-2026-109448 (Integer wraparound in psqlODBC SQLBindParameter allows an application, ...)
-	TODO: check
+	NOT-FOR-US: psqlodbc
 CVE-2026-109399 (SWUpdate through 2026.05.1 contains an improper certificate validation ...)
 	TODO: check
 CVE-2026-109398 (Gumlet php-image-resize before 3.0.1 contains a denial of service vuln ...)
@@ -477,21 +477,21 @@ CVE-2026-109225 (SGLang through 0.5.21 contains an unbounded memory allocation v
 CVE-2026-109222
 	REJECTED
 CVE-2026-109206 (LogicalDOC Community Edition through 9.3 contains a username enumerati ...)
-	TODO: check
+	NOT-FOR-US: LogicalDOC
 CVE-2026-109205 (LogicalDOC Community Edition through 9.3 contains an unauthenticated f ...)
-	TODO: check
+	NOT-FOR-US: LogicalDOC
 CVE-2026-109204 (LogicalDOC Community Edition through 9.3 contains an improper authoriz ...)
-	TODO: check
+	NOT-FOR-US: LogicalDOC
 CVE-2026-109203 (LogicalDOC Community Edition through 9.3 contains a missing authorizat ...)
-	TODO: check
+	NOT-FOR-US: LogicalDOC
 CVE-2026-109202 (LogicalDOC Community Edition through 9.3 contains a missing authorizat ...)
-	TODO: check
+	NOT-FOR-US: LogicalDOC
 CVE-2026-109201 (LogicalDOC Community Edition through 9.3 contains a missing authorizat ...)
-	TODO: check
+	NOT-FOR-US: LogicalDOC
 CVE-2026-109200 (LogicalDOC Community Edition through 9.3 contains a server-side reques ...)
-	TODO: check
+	NOT-FOR-US: LogicalDOC
 CVE-2026-109199 (LogicalDOC Community Edition through 9.3 contains a code injection vul ...)
-	TODO: check
+	NOT-FOR-US: LogicalDOC
 CVE-2026-109195 (A flaw was found in Quay. An authenticated attacker can access reposit ...)
 	NOT-FOR-US: Red Hat software not packaged in Debian
 CVE-2026-109194 (A flaw was found in Red Hat Quay. The build trigger management applica ...)
@@ -533,9 +533,9 @@ CVE-2026-109172 (yshop-crm through 2.1.3 contains a missing authorization vulner
 CVE-2026-109171 (yshop-crm through 2.1.3 contains a missing authorization vulnerability ...)
 	TODO: check
 CVE-2026-109170 (LogicalDOC Community Edition through 9.3 contains an HQL injection vul ...)
-	TODO: check
+	NOT-FOR-US: LogicalDOC
 CVE-2026-109169 (LogicalDOC Community Edition through 9.3 contains a sql injection vuln ...)
-	TODO: check
+	NOT-FOR-US: LogicalDOC
 CVE-2026-109168 (lamp-cloud through 5.10.1 contains an insecure direct object reference ...)
 	TODO: check
 CVE-2026-109167 (TDuck survey form through 6.0 contains an insecure direct object refer ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8928c9b71bf6fa366987ad4976a655084ddcbae7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8928c9b71bf6fa366987ad4976a655084ddcbae7
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261013/565a37d1/attachment.htm>