[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a726bfea by Salvatore Bonaccorso at 2026-10-13T21:49:56+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -10,7 +10,7 @@ CVE-2026-97334 (The network messaging layer contained improper handling of highl
 CVE-2026-97333 (QAPI contained a stack-based buffer overflow affecting service availab ...)
 	NOT-FOR-US: Commvault
 CVE-2026-96535 (Cross-Site Scripting on the YouMind portal, specifically in the avatar ...)
-	TODO: check
+	NOT-FOR-US: YouMind portal
 CVE-2026-96299 (A security issue was discovered in MongoDB mongos (the sharded cluster ...)
 	TODO: check
 CVE-2026-96297 (Use of freed memory in the aggregation feature of MongoDB Server can c ...)
@@ -26,7 +26,7 @@ CVE-2026-95502 (A Git server that Grafana's Git Sync (provisioning) is configure
 CVE-2026-95127 (An issue in libass v.0.17.5 allows a remote attacker to cause a denial ...)
 	TODO: check
 CVE-2026-95124 (Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows  ...)
-	TODO: check
+	NOT-FOR-US: libconfini
 CVE-2026-95122 (mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4Fi ...)
 	TODO: check
 CVE-2026-95121 (An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code v ...)
@@ -68,7 +68,7 @@ CVE-2026-91013 (Adobe Commerce is affected by a stored Cross-Site Scripting (XSS
 CVE-2026-89309 (Vulnerability in tbc.  This issue affects tbc: before 1.)
 	TODO: check
 CVE-2026-89279 (Cross-Site request forgery (CSRF) vulnerability in AuthTake Technology ...)
-	TODO: check
+	NOT-FOR-US: authtake
 CVE-2026-89208 (A vulnerability has been identified in Capital Embedded AR Classic 431 ...)
 	NOT-FOR-US: Siemens
 CVE-2026-89206 (A vulnerability has been identified in RUGGEDCOM CROSSBOW (All version ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a726bfeaf02d69d8aacf51efd333775e3663c99b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a726bfeaf02d69d8aacf51efd333775e3663c99b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261013/d2102135/attachment.htm>