[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Mon Oct 19 08:15:10 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
d5be052b by security tracker role at 2026-10-19T07:15:03+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,39 +1,39 @@
CVE-2026-97859 (Seven Gitea API routes under `/api/v1/users/{username}` (followers, fo ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-97204 (Deleting a label compared the ID of the repository in the request agai ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-94294 (The App Builder WordPress plugin before 5.7.1 does not require authent ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94273 (The Snap Finance WordPress plugin through 3.11.0 does not verify that ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94272 (The Snap Finance WordPress plugin before 3.12.0 does not verify that a ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94231 (The TrueBooker WordPress plugin before 1.3.0 does not have authorisati ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94230 (The TrueBooker WordPress plugin before 1.3.0 does not have authorisati ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94229 (The TrueBooker WordPress plugin before 1.3.0 does not verify that the ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94228 (The TrueBooker WordPress plugin before 1.3.0 does not perform any capa ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-91831 (The Subscribe to Comments WordPress plugin before 2.3.3 does not sanit ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-91047 (The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-91046 (The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-89286 (The FormFlow for GoHighLevel (GHL) WordPress plugin through 1.0.0 doe ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-86791 (The iPOSpays Payment Gateway for WooCommerce WordPress plugin before 1 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-76740 (A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 ...)
- TODO: check
+ NOT-FOR-US: HPE
CVE-2026-76739 (A potential security vulnerability in HPE Compute Scale-up Server 3200 ...)
- TODO: check
+ NOT-FOR-US: HPE
CVE-2026-74922 (The Document Gallery WordPress plugin through 5.1.1 does not verify th ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-74921 (The Document Gallery WordPress plugin through 5.1.1 does not sanitise ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-16487 (A flaw was found in bootc when operating with the default containers s ...)
TODO: check
CVE-2026-16460 (A flaw was found in bootc and ostree. Already-staged deployments are f ...)
@@ -47,7 +47,7 @@ CVE-2026-112089 (A security vulnerability has been detected in Dav-ee dairy-mana
CVE-2026-112088 (A weakness has been identified in Dav-ee dairy-management-system 31ace ...)
TODO: check
CVE-2026-112087 (A weakness has been identified in itsourcecode Online Cake Ordering Sy ...)
- TODO: check
+ NOT-FOR-US: itsourcecode System
CVE-2026-112086 (A vulnerability was found in ESPnet up to 202610.post2. This affects t ...)
TODO: check
CVE-2026-112083 (A security flaw has been discovered in sgl-project SGLang up to 0.5.19 ...)
@@ -101,7 +101,7 @@ CVE-2026-112033 (A security flaw has been discovered in aircheng-org iWebShop-5
CVE-2026-112032 (A vulnerability was identified in aircheng-org iWebShop-5 up to 5.16. ...)
TODO: check
CVE-2026-112031 (A vulnerability was determined in Chamilo LMS up to 1.11.40/2.0.3/3.0. ...)
- TODO: check
+ NOT-FOR-US: Chamilo LMS
CVE-2026-112030 (A vulnerability was found in diem-project diem up to 5.1.3. This vulne ...)
TODO: check
CVE-2026-112029 (A vulnerability has been found in diem-project diem up to 5.1.3. This ...)
@@ -119,11 +119,11 @@ CVE-2026-111441 (\u5728 openGauss-server \u7684 src/gausskernel/cbb/utils/hll/hl
CVE-2026-111440 (\u5728 openGauss-connector-jdbc \u7684 pgjdbc/src/main/java/org/postgr ...)
TODO: check
CVE-2026-110034 (The Salon Booking System WordPress plugin before 10.31.11 does not enf ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-108984 (A vulnerability is in Web Server default connection ports under the pr ...)
- TODO: check
+ NOT-FOR-US: GeoVision
CVE-2026-108983 (A vulnerability is in Web Server default connection ports under the pr ...)
- TODO: check
+ NOT-FOR-US: GeoVision
CVE-2026-108519
REJECTED
CVE-2026-108121 (Brian Mariani from DigitalCanion SA has discovereda vulnerability in t ...)
@@ -131,15 +131,15 @@ CVE-2026-108121 (Brian Mariani from DigitalCanion SA has discovereda vulnerabili
CVE-2026-108120 (Brian Mariani from DigitalCanion SA has discovereda path traversal vul ...)
TODO: check
CVE-2026-106933 (The Blaze Demo Importer WordPress plugin before 1.0.17 does not saniti ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-106028 (The ActiveTrail for WooCommerce WordPress plugin through 1.2.6 does no ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-106014 (The Gateway for Vantiv on WC WordPress plugin through 1.0.1 does not v ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-106010 (The BDM Digital Payment Gateway WordPress plugin through 1.3.12 does n ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103311 (The Coinbase Commerce Payment Gateway for WooCommerce WordPress plugin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103091 (Missing Authorization (CWE-862) and Initialization of a Resource with ...)
TODO: check
CVE-2026-102503 (Missing Authentication for Critical Function (CWE-306) and Missing Aut ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d5be052bdb028005f356b67f093b1e04f5a20479
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d5be052bdb028005f356b67f093b1e04f5a20479
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261019/745d7131/attachment.htm>
More information about the debian-security-tracker-commits
mailing list