[Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Tue Oct 13 19:30:31 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
771f60d9 by Salvatore Bonaccorso at 2026-10-13T20:30:09+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -803,7 +803,7 @@ CVE-2026-109595 (Hugo from v0.84.0 before v0.167.0 contains a path traversal vul
- hugo 0.167.0-1
NOTE: https://github.com/gohugoio/hugo/security/advisories/GHSA-r4xx-89rf-5424
CVE-2026-109575 (In HAProxy Data Plane API 2.2.0 through 3.4.3 (and corresponding Enter ...)
- TODO: check
+ NOT-FOR-US: HAProxy Data Plane API
CVE-2026-109574 (Hugo before v0.167.0 contains a path traversal vulnerability in css.Sa ...)
- hugo 0.167.0-1
NOTE: https://github.com/gohugoio/hugo/security/advisories/GHSA-3jfr-vjcq-7jvf
@@ -816,9 +816,9 @@ CVE-2026-109571 (Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a
CVE-2026-109570 (Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missin ...)
NOT-FOR-US: Fire-Boltt BSW013 smartwatch firmware
CVE-2026-109569 (sandboxed.sh through 1.3.0 contains a container escape vulnerability t ...)
- TODO: check
+ NOT-FOR-US: sandboxed.sh
CVE-2026-109568 (Shaark 1.2.13 through 1.2.44 contains a missing authorization vulnerab ...)
- TODO: check
+ NOT-FOR-US: Shaark
CVE-2026-109567 (Rapyd Admin from 9.0.0 before 9.20.0 contains an improper privilege ma ...)
NOT-FOR-US: Rapyd Admin
CVE-2026-109566 (Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials ...)
@@ -832,7 +832,7 @@ CVE-2026-109563 (N3.js before 2.11.1 contains a regular expression denial of ser
CVE-2026-109562 (SnapOtter 1.15.10 through 2.2.0 contains a missing authorization vulne ...)
NOT-FOR-US: SnapOtter
CVE-2026-109560 (Continue CLI (@continuedev/cli) through 1.5.47 contains a permission b ...)
- TODO: check
+ NOT-FOR-US: Continue CLI (@continuedev/cli)
CVE-2026-109559 (EdgeEver Desktop 1.6.26 through 1.112.0 contains a navigation allowlis ...)
NOT-FOR-US: EdgeEver Desktop
CVE-2026-109558 (EdgeEver 1.6.0 through 1.112.0 contains a stored cross-site scripting ...)
@@ -848,23 +848,23 @@ CVE-2026-109426 (Telegram-Stremio through 5.1.0 contains an insecure storage vul
CVE-2026-109425 (Tink-go (tink-crypto/tink-go) through 2.8.0 contains an input-validati ...)
TODO: check
CVE-2026-109424 (NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.3 ...)
- TODO: check
+ NOT-FOR-US: NetEase Cloud Music client for Windows
CVE-2026-109423 (NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.3 ...)
- TODO: check
+ NOT-FOR-US: NetEase Cloud Music client for Windows
CVE-2026-109422 (NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.3 ...)
- TODO: check
+ NOT-FOR-US: NetEase Cloud Music client for Windows
CVE-2026-109378 (SPIP before 4.4.18 contains a server-side request forgery vulnerabilit ...)
- spip 4.4.18+dfsg-1
[trixie] - spip 4.4.19+dfsg-0+deb13u1
NOTE: https://blog.spip.net/Mise-a-jour-critique-de-securite-sortie-de-SPIP-4-4-18.html
CVE-2026-109377 (ERPNext 9.0.0 through 16.50.0 contains a missing authorization vulnera ...)
- TODO: check
+ NOT-FOR-US: ERPNext
CVE-2026-109376 (ERPNext 15.55.0 through 16.50.0 contains an incorrect authorization vu ...)
- TODO: check
+ NOT-FOR-US: ERPNext
CVE-2026-109375 (Vercel deepsec from 0.1.0 before 1.1.17 contains a link following vuln ...)
- TODO: check
+ NOT-FOR-US: Vercel deepsec
CVE-2026-109106 (A security flaw has been discovered in Polaris Office App 9.9.19 on An ...)
- TODO: check
+ NOT-FOR-US: Polaris Office App
CVE-2026-108975 (A security flaw has been discovered in SourceCodester Library Manageme ...)
NOT-FOR-US: SourceCodester
CVE-2026-108974 (A vulnerability was identified in SourceCodester E-Learning System 1.0 ...)
@@ -876,9 +876,9 @@ CVE-2026-108972 (A vulnerability was found in SourceCodester Human Resource Mana
CVE-2026-108971 (A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the fun ...)
NOT-FOR-US: D-Link
CVE-2026-108970 (A vulnerability was detected in itsmeravitejak Online-Examination-Syst ...)
- TODO: check
+ NOT-FOR-US: itsmeravitejak Online-Examination-System
CVE-2026-108969 (A security vulnerability has been detected in itsmeravitejak Online-Ex ...)
- TODO: check
+ NOT-FOR-US: itsmeravitejak Online-Examination-System
CVE-2026-108968 (A weakness has been identified in SourceCodester Performance Indicator ...)
NOT-FOR-US: SourceCodester
CVE-2026-108967 (A security flaw has been discovered in SourceCodester Performance Indi ...)
@@ -890,41 +890,41 @@ CVE-2026-108965 (A vulnerability was determined in SourceCodester Performance In
CVE-2026-108964 (A vulnerability was found in SourceCodester Performance Indicator Syst ...)
NOT-FOR-US: SourceCodester
CVE-2026-108962 (A vulnerability has been found in storyicon comfyui_segment_anything u ...)
- TODO: check
+ NOT-FOR-US: storyicon comfyui_segment_anything
CVE-2026-108961 (A flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by ...)
- TODO: check
+ NOT-FOR-US: PaddlePaddle PaddleX
CVE-2026-108960 (A vulnerability was detected in Tiiny-AI PowerInfer up to 8bd56d69906c ...)
- TODO: check
+ NOT-FOR-US: Tiiny-AI PowerInfer
CVE-2026-108959 (A security vulnerability has been detected in itsourcecode Online Cake ...)
NOT-FOR-US: itsourcecode System
CVE-2026-108958 (A weakness has been identified in TensorLayer up to 2.2.4. This affect ...)
- TODO: check
+ NOT-FOR-US: TensorLayer
CVE-2026-108957 (A security flaw has been discovered in TinyLLaVA TinyLLaVA_Factory up ...)
- TODO: check
+ NOT-FOR-US: TinyLLaVA TinyLLaVA_Factory
CVE-2026-108956 (A vulnerability was identified in code-projects Online Reviewer System ...)
NOT-FOR-US: code-projects
CVE-2026-108955 (A vulnerability was determined in Tiiny-AI PowerInfer up to 8bd56d6990 ...)
- TODO: check
+ NOT-FOR-US: Tiiny-AI PowerInfer
CVE-2026-108954 (A vulnerability was found in k2-fsa sherpa-onnx up to 1.13.8. This iss ...)
- TODO: check
+ NOT-FOR-US: k2-fsa sherpa-onnx
CVE-2026-108948 (A vulnerability has been found in code-projects Online Reviewer System ...)
NOT-FOR-US: code-projects
CVE-2026-108947 (A flaw has been found in yoshitomo-matsubara torchdistill up to 1.1.5. ...)
- TODO: check
+ NOT-FOR-US: yoshitomo-matsubara torchdistill
CVE-2026-108945 (A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac ...)
- TODO: check
+ NOT-FOR-US: iMoonLab yolov13
CVE-2026-108944 (A security vulnerability has been detected in repository RAE up to a4d ...)
- TODO: check
+ NOT-FOR-US: repository RAE
CVE-2026-108943 (A weakness has been identified in ModelTC LightX2V up to 0.5.0. Affect ...)
- TODO: check
+ NOT-FOR-US: ModelTC LightX2V
CVE-2026-108942 (A security flaw has been discovered in philz1337x clarity-upscaler up ...)
- TODO: check
+ NOT-FOR-US: philz1337x clarity-upscaler
CVE-2026-108941 (A vulnerability was identified in Linketic CityGaussian up to 2.0. Thi ...)
- TODO: check
+ NOT-FOR-US: Linketic CityGaussian
CVE-2026-108940 (A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The ...)
- TODO: check
+ NOT-FOR-US: EricLBuehler Mistral.rs
CVE-2026-108939 (A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. ...)
- TODO: check
+ NOT-FOR-US: EricLBuehler Mistral.rs
CVE-2026-108938 (A flaw has been found in code-projects Matrimonial System 1.0. This is ...)
NOT-FOR-US: code-projects
CVE-2026-108937 (A vulnerability was detected in code-projects Online Ticket Reservatio ...)
@@ -938,13 +938,13 @@ CVE-2026-108934 (A security flaw has been discovered in Edimax BR-6208AC 1.32. A
CVE-2026-108933 (A vulnerability was identified in Edimax BR-6208AC 1.32. Affected is a ...)
NOT-FOR-US: Edimax
CVE-2026-108932 (A vulnerability was determined in Netcore NR268 1.7.121109. This impac ...)
- TODO: check
+ NOT-FOR-US: Netcore
CVE-2026-108931 (A vulnerability was found in Netcore NR268 1.7.121109. This affects th ...)
- TODO: check
+ NOT-FOR-US: Netcore
CVE-2026-108930 (A vulnerability has been found in Netcore NR268 1.7.121109. The impact ...)
- TODO: check
+ NOT-FOR-US: Netcore
CVE-2026-108929 (A flaw has been found in Netcore NR268 1.7.121109. The affected elemen ...)
- TODO: check
+ NOT-FOR-US: Netcore
CVE-2026-108928 (A security vulnerability has been detected in itsourcecode Online Admi ...)
NOT-FOR-US: itsourcecode System
CVE-2026-108927 (A weakness has been identified in itsourcecode Baptism Information Man ...)
@@ -952,21 +952,21 @@ CVE-2026-108927 (A weakness has been identified in itsourcecode Baptism Informat
CVE-2026-108926 (A security flaw has been discovered in itsourcecode Baptism Informatio ...)
NOT-FOR-US: itsourcecode System
CVE-2026-108924 (A vulnerability was identified in getkirby Kirby up to 4.9.5/5.5.3. Af ...)
- TODO: check
+ NOT-FOR-US: getkirby Kirby
CVE-2026-108923 (A vulnerability was determined in 1024-lab smart-admin up to 3.30.0. A ...)
- TODO: check
+ NOT-FOR-US: 1024-lab smart-admin
CVE-2026-108362 (Privasys Remote Attestation TLS Clients provides multi-language utilit ...)
- TODO: check
+ NOT-FOR-US: Privasys Remote Attestation TLS Clients
CVE-2026-108361 (Privasys Remote Attestation TLS Clients provides multi-language utilit ...)
- TODO: check
+ NOT-FOR-US: Privasys Remote Attestation TLS Clients
CVE-2026-106495 (Backstage is an open framework for building developer portals. Prior t ...)
- TODO: check
+ NOT-FOR-US: Backstage
CVE-2026-105458 (GitLab has remediated an issue in GitLab EE affecting all versions fro ...)
NOT-FOR-US: GitLab (used to be packaged in the Debian archive as src:gitlab, but never in a stable release)
CVE-2026-105052 (IBM Maximo Application Suite 8.10, 8.11, 9.0, 9.1, and 9.2 could allow ...)
NOT-FOR-US: IBM
CVE-2026-104774 (OWASP Coraza WAF is a golang modsecurity compatible web application fi ...)
- TODO: check
+ NOT-FOR-US: OWASP Coraza WAF
CVE-2026-104661 (GitLab has remediated an issue in GitLab EE affecting all versions fro ...)
NOT-FOR-US: GitLab (used to be packaged in the Debian archive as src:gitlab, but never in a stable release)
CVE-2026-104364 (IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5could allow a ...)
@@ -1214,17 +1214,17 @@ CVE-2026-109399 (SWUpdate through 2026.05.1 contains an improper certificate val
CVE-2026-109398 (Gumlet php-image-resize before 3.0.1 contains a denial of service vuln ...)
NOT-FOR-US: php-image-resize
CVE-2026-109397 (Thelia before 3.1.2 and 3.2.x before 3.2.1 contains an unrestricted fi ...)
- TODO: check
+ NOT-FOR-US: Thelia
CVE-2026-109396 (Thelia before 3.1.2 and 3.2.x before 3.2.1 contains a CSV formula inje ...)
- TODO: check
+ NOT-FOR-US: Thelia
CVE-2026-109394 (Thirty bees through 1.7.0 contains an authentication bypass vulnerabil ...)
- TODO: check
+ NOT-FOR-US: Thirty bees
CVE-2026-109393 (QloApps through 1.7.0 contains an insecure direct object reference vul ...)
- TODO: check
+ NOT-FOR-US: QloApps
CVE-2026-109392 (Pimcore through 2026.3.1 contains a stored cross-site scripting vulner ...)
- TODO: check
+ NOT-FOR-US: Pimcore
CVE-2026-109391 (Square Squash through commit e73f280 contains an insecure deserializat ...)
- TODO: check
+ NOT-FOR-US: Square Squash
CVE-2026-109390 (AnyDesk before 8.0.3 allows unauthenticated remote attackers to execut ...)
NOT-FOR-US: Anydesk
CVE-2026-109374 (ZITADEL 3.0.0 before 4.19.2 contains a privilege escalation vulnerabil ...)
@@ -1284,7 +1284,7 @@ CVE-2026-109348 (Gitoxide gix-mailmap before 0.35.0 contains a denial of service
CVE-2026-109347 (Adminer before 6.1.1 contains a remote code execution vulnerability th ...)
TODO: check
CVE-2026-109346 (better-auth from 1.3.8-beta.3 before 1.7.0-rc.3 contains a UI misrepre ...)
- TODO: check
+ NOT-FOR-US: Better Auth
CVE-2026-109345 (DOMPurify before 3.4.16 contains a cross-site scripting vulnerability ...)
TODO: check
CVE-2026-109344 (DOMPurify from 3.4.13 before 3.4.16 contains a cross-site scripting vu ...)
@@ -1590,47 +1590,47 @@ CVE-2026-109179 (jshERP through 3.6 contains a missing authorization vulnerabili
CVE-2026-109178 (jshERP through 3.6 contains a missing authorization vulnerability in L ...)
NOT-FOR-US: jshERP
CVE-2026-109177 (MoguBlog through 6.2 contains a broken access control vulnerability th ...)
- TODO: check
+ NOT-FOR-US: MoguBlog
CVE-2026-109176 (MoguBlog through 6.2 contains an insecure direct object reference vuln ...)
- TODO: check
+ NOT-FOR-US: MoguBlog
CVE-2026-109175 (MoguBlog through 6.2 contains an insecure direct object reference vuln ...)
- TODO: check
+ NOT-FOR-US: MoguBlog
CVE-2026-109174 (MoguBlog through 6.2 contains an information disclosure vulnerability ...)
- TODO: check
+ NOT-FOR-US: MoguBlog
CVE-2026-109173 (yshop-crm through 2.1.3 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: yshop-crm
CVE-2026-109172 (yshop-crm through 2.1.3 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: yshop-crm
CVE-2026-109171 (yshop-crm through 2.1.3 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: yshop-crm
CVE-2026-109170 (LogicalDOC Community Edition through 9.3 contains an HQL injection vul ...)
NOT-FOR-US: LogicalDOC
CVE-2026-109169 (LogicalDOC Community Edition through 9.3 contains a sql injection vuln ...)
NOT-FOR-US: LogicalDOC
CVE-2026-109168 (lamp-cloud through 5.10.1 contains an insecure direct object reference ...)
- TODO: check
+ NOT-FOR-US: lamp-cloud
CVE-2026-109167 (TDuck survey form through 6.0 contains an insecure direct object refer ...)
- TODO: check
+ NOT-FOR-US: TDuck survey form
CVE-2026-109166 (lamp-cloud through 5.10.1 contains an insecure direct object reference ...)
- TODO: check
+ NOT-FOR-US: lamp-cloud
CVE-2026-109165 (TDuck survey form through 6.0 contains a broken access control vulnera ...)
- TODO: check
+ NOT-FOR-US: TDuck survey form
CVE-2026-109164 (TDuck survey form through 6.0 contains an insecure direct object refer ...)
- TODO: check
+ NOT-FOR-US: TDuck survey form
CVE-2026-108979
REJECTED
CVE-2026-108953 (mac-shell-mcp before 2.0.0 contains an OS command injection vulnerabil ...)
- TODO: check
+ NOT-FOR-US: mac-shell-mcp
CVE-2026-108952 (RT-Thread through 5.3.0 contains a memory corruption vulnerability in ...)
- TODO: check
+ NOT-FOR-US: RT-Thread
CVE-2026-108951 (LavaLite CMS through 10.1.2 contains an authorization bypass vulnerabi ...)
- TODO: check
+ NOT-FOR-US: LavaLite CMS
CVE-2026-108950 (Open Source Social Network (OSSN) through 10.1 contains a missing auth ...)
- TODO: check
+ NOT-FOR-US: Open Source Social Network (OSSN)
CVE-2026-108922 (A flaw has been found in KusalkaSilva Learning-Management-System up to ...)
- TODO: check
+ NOT-FOR-US: KusalkaSilva Learning-Management-System
CVE-2026-108921 (A vulnerability was detected in KusalkaSilva Learning-Management-Syste ...)
- TODO: check
+ NOT-FOR-US: KusalkaSilva Learning-Management-System
CVE-2026-108920 (A security vulnerability has been detected in SourceCodester Drug Reco ...)
NOT-FOR-US: SourceCodester
CVE-2026-108919 (A weakness has been identified in SourceCodester Drug Recommendation S ...)
@@ -1646,23 +1646,23 @@ CVE-2026-108915 (A vulnerability has been found in Edimax BR-6208AC 1.32. This a
CVE-2026-108914 (A flaw has been found in Edimax BR-6208AC 1.32. Affected by this issue ...)
NOT-FOR-US: Edimax
CVE-2026-108909 (A security flaw has been discovered in Netcore NR268 1.7.121109. Affec ...)
- TODO: check
+ NOT-FOR-US: Netcore
CVE-2026-108908 (A vulnerability was identified in Netcore NR268 1.7.121109. Affected b ...)
- TODO: check
+ NOT-FOR-US: Netcore
CVE-2026-108907 (A vulnerability was determined in Netcore NR268 1.7.121109. Affected i ...)
- TODO: check
+ NOT-FOR-US: Netcore
CVE-2026-108906 (A vulnerability has been found in Netcore NR268 1.7.121109. This affec ...)
- TODO: check
+ NOT-FOR-US: Netcore
CVE-2026-108901 (A vulnerability was found in Shenzhen HCC Technology MPOS M6 PLUS 1.31 ...)
- TODO: check
+ NOT-FOR-US: Shenzhen HCC Technology MPOS M6 PLUS
CVE-2026-108900 (A vulnerability has been found in Exponent CMS up to 3.0.2patch2. Affe ...)
- TODO: check
+ NOT-FOR-US: Exponent CMS
CVE-2026-108899 (A flaw has been found in tobychui zoraxy up to 3.3.4. This impacts the ...)
- TODO: check
+ NOT-FOR-US: tobychui zoraxy
CVE-2026-108898 (A vulnerability was detected in Netis WF2409E 3.3.42541. This affects ...)
- TODO: check
+ NOT-FOR-US: Netis
CVE-2026-108897 (A security vulnerability has been detected in Smart Media4U Technology ...)
- TODO: check
+ NOT-FOR-US: Smart Media4U Technology SHAREit App
CVE-2026-108896 (A vulnerability was found in Linksys E1700 1.0.0.4.003. This affects t ...)
NOT-FOR-US: Linksys
CVE-2026-108895 (A weakness has been identified in Linksys E1700 1.0.0.4.003. The affec ...)
@@ -1674,57 +1674,57 @@ CVE-2026-108893 (A vulnerability was identified in Linksys E1700 up to 1.0.0.4.0
CVE-2026-108892 (A vulnerability was determined in Linksys E1700 1.0.0.4.003. This vuln ...)
NOT-FOR-US: Linksys
CVE-2026-108890 (A vulnerability has been found in BlackBeltTechnology pi-agent-dashboa ...)
- TODO: check
+ NOT-FOR-US: BlackBeltTechnology pi-agent-dashboard
CVE-2026-108889 (A flaw has been found in Yungengxin Cloud Billing 2024.11.28.11. Affec ...)
- TODO: check
+ NOT-FOR-US: Yungengxin Cloud Billing
CVE-2026-108836 (A vulnerability has been found in Ollama up to 0.34.1. The affected el ...)
TODO: check
CVE-2026-108835 (A flaw has been found in Yungengxin Yun Jia Security Guard up to 2.7.1 ...)
- TODO: check
+ NOT-FOR-US: Yungengxin Yun Jia Security Guard
CVE-2026-108834 (A vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0. This ...)
- TODO: check
+ NOT-FOR-US: Cairo-dock Glx-Dock
CVE-2026-108831 (A security vulnerability has been detected in meetecho janus-gateway u ...)
TODO: check
CVE-2026-108830 (A weakness has been identified in meetecho janus-gateway up to 1.4.2. ...)
TODO: check
CVE-2026-108829 (A security flaw has been discovered in Zen Cart up to 2.2.2. Affected ...)
- TODO: check
+ NOT-FOR-US: Zen Cart
CVE-2026-108828 (A vulnerability was identified in Zen Cart 2.2.2. Affected by this vul ...)
- TODO: check
+ NOT-FOR-US: Zen Cart
CVE-2026-108827 (A vulnerability was determined in Zen Cart up to 2.2.2. Affected is th ...)
- TODO: check
+ NOT-FOR-US: Zen Cart
CVE-2026-108826 (A vulnerability was found in Zen Cart up to 2.2.2. This impacts the fu ...)
- TODO: check
+ NOT-FOR-US: Zen Cart
CVE-2026-108825 (A vulnerability has been found in yangzongzhuan RuoYi up to 4.8.3. Thi ...)
- TODO: check
+ NOT-FOR-US: yangzongzhuan RuoYi
CVE-2026-108824 (A flaw has been found in DataEase up to 3.0.0. The impacted element is ...)
NOT-FOR-US: DataEase
CVE-2026-108822 (A vulnerability was detected in Kamailio up to 6.0.7/6.1.3. The affect ...)
TODO: check
CVE-2026-108821 (A security vulnerability has been detected in Tencent WeKnora up to 0. ...)
- TODO: check
+ NOT-FOR-US: Tencent WeKnora
CVE-2026-108820 (A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1. Thi ...)
- TODO: check
+ NOT-FOR-US: agno-agi agno
CVE-2026-108819 (A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1 ...)
- TODO: check
+ NOT-FOR-US: agno-agi agno
CVE-2026-108818 (A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6. Thi ...)
- TODO: check
+ NOT-FOR-US: agno-agi agno
CVE-2026-108817 (A vulnerability was determined in agno-agi agno up to 3.0.9. Affected ...)
- TODO: check
+ NOT-FOR-US: agno-agi agno
CVE-2026-108816 (A vulnerability was found in agno-agi agno up to 3.0.6. Affected by th ...)
- TODO: check
+ NOT-FOR-US: agno-agi agno
CVE-2026-108815 (A vulnerability has been found in idcCMS 1.70. Affected is an unknown ...)
- TODO: check
+ NOT-FOR-US: idcCMS
CVE-2026-108814 (A flaw has been found in SEMCMS up to 5.0. This impacts an unknown fun ...)
- TODO: check
+ NOT-FOR-US: SEMCMS
CVE-2026-108813 (A vulnerability was detected in SEMCMS up to 5.0. This affects an unkn ...)
- TODO: check
+ NOT-FOR-US: SEMCMS
CVE-2026-108812 (A security vulnerability has been detected in SEMCMS up to 5.0. The im ...)
- TODO: check
+ NOT-FOR-US: SEMCMS
CVE-2026-108811 (A weakness has been identified in WMCMS 4.446.1257. The affected eleme ...)
- TODO: check
+ NOT-FOR-US: WMCMS
CVE-2026-108810 (A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5 ...)
- TODO: check
+ NOT-FOR-US: tsi-coop tsi-dpdp-cms
CVE-2026-108486 (Missing Authorization vulnerability in WPMU DEV Forminator forminator ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-108482 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
@@ -1770,7 +1770,7 @@ CVE-2026-107423 (Missing Authorization vulnerability in WP User Manager WP User
CVE-2026-107418 (Missing Authorization vulnerability in Arraytics Booktics booktics all ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-107248 (Thelia 3.0.0's back-office Email/Messages feature contains a server\u2 ...)
- TODO: check
+ NOT-FOR-US: Thelia
CVE-2026-107226 (The AsyncHttpClient (AHC) library allows Java applications to easily e ...)
- async-http-client <unfixed>
NOTE: https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-p2jm-6hj6-9rjg
@@ -1798,7 +1798,7 @@ CVE-2026-105408 (A Stored Cross-site Scripting (XSS) vulnerability affecting Tul
CVE-2026-105407 (An OS Command Injection vulnerability affecting Tuleap Enterprise Edit ...)
NOT-FOR-US: Dassault Systemes
CVE-2026-105283 (Generation of Error Message Containing Sensitive Information vulnerabi ...)
- TODO: check
+ NOT-FOR-US: ash-project
CVE-2026-105280 (Improper Validation of Integrity Check Value vulnerability in hexpm he ...)
TODO: check
CVE-2026-105274 (Improper Handling of Highly Compressed Data (Data Amplification) vulne ...)
@@ -1810,7 +1810,7 @@ CVE-2026-104710
CVE-2026-104355 (A connected peer cluster can modify a Temporal Server cluster's local ...)
NOT-FOR-US: Temporal Technologies
CVE-2026-104102 (copyparty is a portable file server. Prior to 1.20.19, FTP upload path ...)
- TODO: check
+ NOT-FOR-US: copyparty
CVE-2026-103903 (An incorrect authorization vulnerability in the WinBox authentication ...)
NOT-FOR-US: MikroTik
CVE-2026-103902 (Improper verification of cryptographic signature vulnerability in Digi ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/771f60d934c99384319b3c93730ba7af3902b058
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/771f60d934c99384319b3c93730ba7af3902b058
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261013/8f24c5dc/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list