[Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Mon Oct 19 15:35:24 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
d8b8d704 by Salvatore Bonaccorso at 2026-10-19T16:29:17+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -245,68 +245,68 @@ CVE-2026-112006 (OpenTelemetry opentelemetry-exporter-otlp-proto-http 1.5.0 befo
- python-opentelemetry 1.45.1-1
NOTE: Fixed by: https://github.com/open-telemetry/opentelemetry-python/commit/89cc68b9ea7e15969b4f042d63397bdc74a3d60e (v1.45.0)
CVE-2026-112005 (WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability t ...)
- TODO: check
+ NOT-FOR-US: WhoDB
CVE-2026-112004 (Teable before 2026-10-12T12-45-53Z.3331 contains an authorization bypa ...)
- TODO: check
+ NOT-FOR-US: Teable
CVE-2026-112003 (ProjectSend 2.0.0 before 2.7.0 contains a path validation flaw in Orph ...)
- TODO: check
+ NOT-FOR-US: ProjectSend
CVE-2026-112002 (ProjectSend 2.5.0 before 2.7.0 contains an unverified password change ...)
- TODO: check
+ NOT-FOR-US: ProjectSend
CVE-2026-112001 (ProjectSend 2.0.0 before 2.7.0 contains an incorrect authorization vul ...)
- TODO: check
+ NOT-FOR-US: ProjectSend
CVE-2026-112000 (Vanus 0.8.0 through 0.9.0 contains a missing authorization vulnerabili ...)
- TODO: check
+ NOT-FOR-US: Vanus
CVE-2026-111999 (Vanus 0.8.0 through 0.9.0 contains a missing authentication vulnerabil ...)
- TODO: check
+ NOT-FOR-US: Vanus
CVE-2026-111998 (Vanus 0.8.0 through 0.9.0 contains a default credentials vulnerability ...)
- TODO: check
+ NOT-FOR-US: Vanus
CVE-2026-111997 (ip-address before 10.7.4 allows a denial of service (CPU consumption f ...)
- node-ip-address <unfixed>
NOTE: https://github.com/beaugunderson/ip-address/security/advisories/GHSA-rxp7-6hxx-x8q5
CVE-2026-111993 (A flaw has been found in Soarkey StudentManagement up to e08f7f1d5015a ...)
- TODO: check
+ NOT-FOR-US: Soarkey StudentManagement
CVE-2026-111992 (A vulnerability was detected in itsmeravitejak Online-Examination-Syst ...)
- TODO: check
+ NOT-FOR-US: itsmeravitejak Online-Examination-System
CVE-2026-111991 (A security vulnerability has been detected in WongKinYiu yolov9 0.1. T ...)
- TODO: check
+ NOT-FOR-US: WongKinYiu yolov9
CVE-2026-111990 (A weakness has been identified in kishan0725 Hospital Management Syste ...)
- TODO: check
+ NOT-FOR-US: kishan0725 Hospital Management System
CVE-2026-111988 (A security flaw has been discovered in dyad-sh dyad up to 1.16.0. Affe ...)
- TODO: check
+ NOT-FOR-US: dyad-sh dyad
CVE-2026-111987 (A vulnerability was identified in AUTOMATIC1111 stable-diffusion-webui ...)
- TODO: check
+ NOT-FOR-US: AUTOMATIC1111 stable-diffusion-webui
CVE-2026-111986 (A vulnerability was determined in AUTOMATIC1111 stable-diffusion-webui ...)
- TODO: check
+ NOT-FOR-US: AUTOMATIC1111 stable-diffusion-webui
CVE-2026-111985 (A vulnerability was found in AUTOMATIC1111 stable-diffusion-webui up t ...)
- TODO: check
+ NOT-FOR-US: AUTOMATIC1111 stable-diffusion-webui
CVE-2026-111984 (A vulnerability has been found in AUTOMATIC1111 stable-diffusion-webui ...)
- TODO: check
+ NOT-FOR-US: AUTOMATIC1111 stable-diffusion-webui
CVE-2026-111942 (A weakness has been identified in hrisikeshpal Blood_Bank_Management_S ...)
- TODO: check
+ NOT-FOR-US: hrisikeshpal Blood_Bank_Management_System
CVE-2026-111877 (A vulnerability was determined in dext34-morgan Books4Cash up to a8d3e ...)
- TODO: check
+ NOT-FOR-US: dext34-morgan Books4Cash
CVE-2026-111876 (A vulnerability was found in alexpasmantier television up to 0.15.9. A ...)
- TODO: check
+ NOT-FOR-US: alexpasmantier television
CVE-2026-111875 (A vulnerability has been found in David-Crty Databasement up to 1.8.1. ...)
- TODO: check
+ NOT-FOR-US: David-Crty Databasement
CVE-2026-111874 (A flaw has been found in OpenCATS 0.10.0. Affected is the function pro ...)
- TODO: check
+ NOT-FOR-US: OpenCATS
CVE-2026-111873 (A vulnerability was detected in itsmeravitejak Online-Examination-Syst ...)
- TODO: check
+ NOT-FOR-US: itsmeravitejak Online-Examination-System
CVE-2026-111872 (A security vulnerability has been detected in itsmeravitejak Online-Ex ...)
- TODO: check
+ NOT-FOR-US: itsmeravitejak Online-Examination-System
CVE-2026-111871 (A weakness has been identified in itsmeravitejak Online-Examination-Sy ...)
- TODO: check
+ NOT-FOR-US: itsmeravitejak Online-Examination-System
CVE-2026-111870 (A security flaw has been discovered in itsmeravitejak Online-Examinati ...)
- TODO: check
+ NOT-FOR-US: itsmeravitejak Online-Examination-System
CVE-2026-111869 (A vulnerability was identified in makeplane plane up to 1.4.2. Impacte ...)
- TODO: check
+ NOT-FOR-US: makeplane plane
CVE-2026-111868 (A vulnerability was determined in datastax pulsar-jms up to 9.0.3. Thi ...)
- TODO: check
+ NOT-FOR-US: datastax pulsar-jms
CVE-2026-111866 (A weakness has been identified in nemoTyrant manong up to 7c9e5228e133 ...)
- TODO: check
+ NOT-FOR-US: nemoTyrant manong
CVE-2026-111865 (A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabd ...)
- TODO: check
+ NOT-FOR-US: THU-MIG yoloe
CVE-2026-111041 (The AI Engine WordPress plugin before 3.7.9 does not verify that the ...)
NOT-FOR-US: WordPress plugin
CVE-2026-110981 (The WP Photo Album Plus WordPress plugin before 9.2.11.002 does not pr ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d8b8d7041127ddad68c3d50c2b57d9e6ed31f085
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d8b8d7041127ddad68c3d50c2b57d9e6ed31f085
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261019/3e0e77c5/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list