[Git][security-tracker-team/security-tracker][master] Process some new NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2f37b491 by Salvatore Bonaccorso at 2026-10-16T09:58:21+02:00
Process some new NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -75,7 +75,7 @@ CVE-2026-5819
 CVE-2026-45165 (An authorization flaw in Idira Conjur version 13.9.0 allows an authent ...)
 	NOT-FOR-US: Palo Alto Networks
 CVE-2026-36436 (An issue in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credenti ...)
-	TODO: check
+	NOT-FOR-US: Trisolutions BRPerfX
 CVE-2026-2937
 	REJECTED
 CVE-2026-19867 (Mattermost versions 11.10.x <= 11.10.0, 11.9.x <= 11.9.1, 11.8.x <= 11 ...)
@@ -103,39 +103,39 @@ CVE-2026-12272 (The Lightweight Cookie Notice \u2013 Cookie Banner for Cookie Co
 CVE-2026-111458 (The fanx_fingerprint function in ssl/sslxprint.c of ssldump allocates  ...)
 	TODO: check
 CVE-2026-111451 (Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or escapes cal ...)
-	TODO: check
+	NOT-FOR-US: Wheels
 CVE-2026-111450 (Wheels through 4.1.1 derives its default production error-email addres ...)
-	TODO: check
+	NOT-FOR-US: Wheels
 CVE-2026-111449 (Wheels 3.0.0 through 4.1.1 can disclose detailed exceptions when allow ...)
-	TODO: check
+	NOT-FOR-US: Wheels
 CVE-2026-111448 (Wheels 4.0.0 through 4.1.2 uses case-insensitive comparisons in path-c ...)
-	TODO: check
+	NOT-FOR-US: Wheels
 CVE-2026-111447 (Wheels 1.1 through 4.1.2 resolves nestedProperties() records by posted ...)
-	TODO: check
+	NOT-FOR-US: Wheels
 CVE-2026-111446 (Wheels 4.0.0 through 4.1.2 exposes password-less development tools und ...)
-	TODO: check
+	NOT-FOR-US: Wheels
 CVE-2026-111445 (Wheels 4.0.0 through 4.1.2 before 4.2.0 replaces incoming scope condit ...)
-	TODO: check
+	NOT-FOR-US: Wheels
 CVE-2026-111444 (Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backsl ...)
-	TODO: check
+	NOT-FOR-US: Wheels
 CVE-2026-111443 (Wheels 4.0.6 through 4.1.2 lets an unauthenticated client switch a req ...)
-	TODO: check
+	NOT-FOR-US: Wheels
 CVE-2026-111442 (Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 does n ...)
-	TODO: check
+	NOT-FOR-US: Backdrop CMS
 CVE-2026-111389 (Frappe HRMS 14.x before 14.38.2, 15.x before 15.64.0, and 16.x before  ...)
 	NOT-FOR-US: Frappe
 CVE-2026-111388 (Frappe Framework before 15.120.0 and 16.x before 16.33.0 does not enfo ...)
 	NOT-FOR-US: Frappe
 CVE-2026-111387 (Nezha from 2.2.5 before 2.3.15 contains an information disclosure vuln ...)
-	TODO: check
+	NOT-FOR-US: Nezha
 CVE-2026-111386 (Nezha from 1.7.0 before 2.3.15 contains an information disclosure vuln ...)
-	TODO: check
+	NOT-FOR-US: Nezha
 CVE-2026-111385 (Nezha from 2.1.0 before 2.3.15 contains a host header injection vulner ...)
-	TODO: check
+	NOT-FOR-US: Nezha
 CVE-2026-111384 (Nezha 1.0.0 before 2.3.15 contains a memory exhaustion vulnerability i ...)
-	TODO: check
+	NOT-FOR-US: Nezha
 CVE-2026-111383 (Nezha from 2.0.13 before 2.3.15 contains a resource exhaustion vulnera ...)
-	TODO: check
+	NOT-FOR-US: Nezha
 CVE-2026-111369 (ClassroomIO through 1.0.0 contains an incorrect authorization vulnerab ...)
 	TODO: check
 CVE-2026-111368 (ClassroomIO through 1.0.0 contains an insecure direct object reference ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2f37b491473d5858679e960bc92b681c0ef9f94e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2f37b491473d5858679e960bc92b681c0ef9f94e
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261016/7f825ff8/attachment.htm>