[Git][security-tracker-team/security-tracker][master] NFUs

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0f473afa by Moritz Muehlenhoff at 2026-10-14T14:45:15+02:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4225,7 +4225,7 @@ CVE-2026-110105 (B3log Symphony through 3.6.4 contains a missing authorization v
 CVE-2026-110104 (Xxyopen novel through 3.5.0 contains a weak password hashing vulnerabi ...)
 	NOT-FOR-US: Xxyopen novel
 CVE-2026-110103 (bbs-go through 4.4.6 contains a stored cross-site scripting vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: bbs-go
 CVE-2026-110102 (Powerlevel10k through 1.20.0 contains an insecure download vulnerabili ...)
 	NOT-FOR-US: Powerlevel10k
 CVE-2026-110101 (Koillection through 1.8.4 contains a stored cross-site scripting vulne ...)
@@ -4239,7 +4239,7 @@ CVE-2026-110098 (Jorani before 1.0.4 contains an insecure direct object referenc
 CVE-2026-110097 (Ikaros 1.2.0 through 1.2.5 contains an authentication bypass vulnerabi ...)
 	NOT-FOR-US: Ikaros
 CVE-2026-110036 (A flaw was found in device-mapper-persistent-data. A local attacker ca ...)
-	TODO: check
+	NOT-FOR-US: Red Hat device-mapper-persistent-data
 CVE-2026-110025 (A flaw has been found in slackero phpwcms up to 1.9.49/1.12.3. This is ...)
 	NOT-FOR-US: phpwcms
 CVE-2026-10759 (A flaw in Portal for ArcGIS could allow LDAP injection through adminis ...)
@@ -4468,13 +4468,13 @@ CVE-2026-109149 (A weakness has been identified in beautifier js-beautify up to
 CVE-2026-109144 (A vulnerability was identified in wbond certvalidator up to 0.11.1. Th ...)
 	TODO: check
 CVE-2026-109143 (A vulnerability was determined in calcom cal.com and cal.diy up to 6.2 ...)
-	TODO: check
+	NOT-FOR-US: calcom cal.com and cal.diy
 CVE-2026-109116 (A vulnerability was determined in AdithyaYelloju Restaurant-Management ...)
-	TODO: check
+	NOT-FOR-US: Restaurant-Management-System
 CVE-2026-109115 (A vulnerability was found in AdithyaYelloju Restaurant-Management-Syst ...)
-	TODO: check
+	NOT-FOR-US: Restaurant-Management-System
 CVE-2026-109114 (A vulnerability has been found in AdithyaYelloju Restaurant-Management ...)
-	TODO: check
+	NOT-FOR-US: Restaurant-Management-System
 CVE-2026-109110 (A flaw has been found in Wavlink WL-WN592AX6 250422. This issue affect ...)
 	NOT-FOR-US: Wavlink
 CVE-2026-109109 (A vulnerability was detected in Wavlink WL-WN530BE1-A 251117. This vul ...)
@@ -4581,7 +4581,7 @@ CVE-2026-105460 (A flaw was found in BlueZ. An out-of-bounds read vulnerability
 CVE-2026-105445 (An Incorrect Privilege Assignment vulnerability in Docker Hub's accoun ...)
 	TODO: check
 CVE-2026-104937 (Shopware version 6.7 allows the upload of attacker\u2011controlled HTM ...)
-	TODO: check
+	NOT-FOR-US: Shopware
 CVE-2026-104935 (Authentication bypass by spoofing in ICS before version 25.1.3.0 allow ...)
 	NOT-FOR-US: Ivanti
 CVE-2026-104817 (Misskey is an open source, federated social media platform. From 12.11 ...)
@@ -4599,9 +4599,9 @@ CVE-2026-104341 (Adobe Framemaker is affected by an out-of-bounds write vulnerab
 CVE-2026-104340 (Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerabi ...)
 	NOT-FOR-US: Adobe
 CVE-2026-104250 (The unstructured library provides open-source components for ingesting ...)
-	TODO: check
+	NOT-FOR-US: unstructured
 CVE-2026-104192 (Dragonfly is an in-memory data store built for modern application work ...)
-	TODO: check
+	NOT-FOR-US: Dragonfly
 CVE-2026-104126 (JumpServer is an open source bastion host and an operation and mainten ...)
 	TODO: check
 CVE-2026-104085 (odt2spip plugin for SPIP before 4.4.0 contains an OS command injection ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0f473afa5d96e3e1cb2c53f564874aae26c0f75d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0f473afa5d96e3e1cb2c53f564874aae26c0f75d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261014/298c7420/attachment.htm>