[Git][security-tracker-team/security-tracker][master] Process some NFUs

Sat Oct 17 13:07:23 BST 2026


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6d2b0642 by Salvatore Bonaccorso at 2026-10-17T14:07:03+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3055,65 +3055,65 @@ CVE-2026-110638 (doc-recog through 1.1.6 contains an OS command injection vulner
 CVE-2026-110637 (buildebooks before 0.2.2 contains an OS command injection vulnerabilit ...)
 	NOT-FOR-US: buildebooks
 CVE-2026-110636 (pypdftk through 0.5 contains an OS command injection vulnerability in  ...)
-	TODO: check
+	NOT-FOR-US: pypdftk
 CVE-2026-110635 (webp-converter before 3.0.0 contains an OS command injection vulnerabi ...)
-	TODO: check
+	NOT-FOR-US: webp-converter
 CVE-2026-110634 (git-diff before 2.0.7 contains an OS command injection vulnerability t ...)
-	TODO: check
+	NOT-FOR-US: danday74/git-diff
 CVE-2026-110633 (MyReport Updater through 2.1.1 contains a local privilege escalation v ...)
-	TODO: check
+	NOT-FOR-US: MyReport Updater
 CVE-2026-110632 (Report One MyReport Updater through 2.1.1 exposes an unauthenticated g ...)
-	TODO: check
+	NOT-FOR-US: MyReport Updater
 CVE-2026-110631 (Komodo through 2.3.3 contains an authentication bypass vulnerability i ...)
-	TODO: check
+	NOT-FOR-US: Komodo
 CVE-2026-110630 (VentureDrake Laravel CRM before 2.4.0 contains an incorrect authorizat ...)
-	TODO: check
+	NOT-FOR-US: VentureDrake Laravel CRM
 CVE-2026-110629 (VentureDrake Laravel CRM before 2.4.0 contains a missing authorization ...)
-	TODO: check
+	NOT-FOR-US: VentureDrake Laravel CRM
 CVE-2026-110628 (Kan 0.5.5 through 0.6.0 contains an unauthenticated server-side reques ...)
-	TODO: check
+	NOT-FOR-US: Kan
 CVE-2026-110627 (ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scrip ...)
-	TODO: check
+	NOT-FOR-US: ClipBucket
 CVE-2026-110626 (ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scrip ...)
-	TODO: check
+	NOT-FOR-US: ClipBucket
 CVE-2026-110625 (ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scrip ...)
-	TODO: check
+	NOT-FOR-US: ClipBucket
 CVE-2026-110624 (Papermerge Core through 3.5.3 contains a missing authorization vulnera ...)
-	TODO: check
+	NOT-FOR-US: Papermerge Core
 CVE-2026-110623 (Papermerge Core through 3.5.3 contains a missing authorization vulnera ...)
-	TODO: check
+	NOT-FOR-US: Papermerge Core
 CVE-2026-110622 (Papermerge Core through 3.5.3 contains a missing authorization vulnera ...)
-	TODO: check
+	NOT-FOR-US: Papermerge Core
 CVE-2026-110621 (Swetrix Cloud before 5.1.0 contains a missing authorization vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: Swetrix Cloud
 CVE-2026-110620 (Formbricks before 4.9.0 contains an authorization bypass vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Formbricks
 CVE-2026-110619 (frp 0.41.0 through 0.71.1 contains a missing authentication vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: frp
 CVE-2026-110618 (SmsForwarder through 3.5.0 contains a missing authentication vulnerabi ...)
-	TODO: check
+	NOT-FOR-US: SmsForwarder
 CVE-2026-110617 (we-mp-rss through 1.5.3 contains a missing authorization vulnerability ...)
-	TODO: check
+	NOT-FOR-US: we-mp-rss
 CVE-2026-110616 (NullHub through 2026.5.29 contains a missing authentication vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: NullHub
 CVE-2026-110615 (jshERP through 3.6 contains a missing authorization vulnerability in t ...)
-	TODO: check
+	NOT-FOR-US: jshERP
 CVE-2026-110614 (Yiuman citrus through 0.15.0 contains an ORDER BY sql injection vulner ...)
-	TODO: check
+	NOT-FOR-US: Yiuman citrus
 CVE-2026-110613 (youlai-mall through commit 9f62de8 contains a missing authorization vu ...)
-	TODO: check
+	NOT-FOR-US: youlai-mall
 CVE-2026-110612 (vlife through 2.0.1 contains an authentication bypass vulnerability th ...)
-	TODO: check
+	NOT-FOR-US: vlife
 CVE-2026-110611 (REBUILD through 4.5.0 contains an authorization bypass vulnerability i ...)
-	TODO: check
+	NOT-FOR-US: REBUILD
 CVE-2026-110610 (ruoyi-vue-pro through 2026.09 contains a server-side request forgery v ...)
-	TODO: check
+	NOT-FOR-US: ruoyi-vue-pro
 CVE-2026-110609 (Dromara Skyeye through commit 65d3ddcede70 contains an sql injection v ...)
-	TODO: check
+	NOT-FOR-US: Dromara Skyeye
 CVE-2026-110608 (BizSpring Shop through commit cf22d39daaf1 contains an insecure direct ...)
-	TODO: check
+	NOT-FOR-US: BizSpring Shop
 CVE-2026-110607 (BizSpring Shop through commit cf22d39daaf1 contains a payment verifica ...)
-	TODO: check
+	NOT-FOR-US: BizSpring Shop
 CVE-2026-110606 (LibreCAD libdxfrw through LC2.2.0 (LibreCAD through 2.2.1.5) contains  ...)
 	TODO: check
 CVE-2026-110605 (libschrift through 0.10.2 contains a divide by zero vulnerability that ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6d2b064278f053cc61a6d86f9c26f486e952983d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6d2b064278f053cc61a6d86f9c26f486e952983d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261017/aad9ed19/attachment-0001.htm>
