[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2dbd3217 by Salvatore Bonaccorso at 2026-10-21T21:09:22+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1467,63 +1467,63 @@ CVE-2026-114095 (Dulwich before 1.2.9 contains a denial of service vulnerability
 CVE-2026-114094 (Dulwich before 1.2.9 fails to validate DOS drive letter prefixes in Gi ...)
 	TODO: check
 CVE-2026-114093 (Trigger.dev before 4.5.6 contains a cross-site request forgery vulnera ...)
-	TODO: check
+	NOT-FOR-US: Trigger.dev
 CVE-2026-114092 (Trigger.dev before 4.5.0 performs no authentication or organization ch ...)
-	TODO: check
+	NOT-FOR-US: Trigger.dev
 CVE-2026-114091 (Trigger.dev before 4.5.0 looks up runs by friendlyId alone in the api. ...)
-	TODO: check
+	NOT-FOR-US: Trigger.dev
 CVE-2026-114090 (Trigger.dev cli-v3 from 3.0.0 before 4.5.4 contains a missing authenti ...)
-	TODO: check
+	NOT-FOR-US: Trigger.dev
 CVE-2026-114089 (Trigger.dev before 4.5.2 contains a cross-site request forgery vulnera ...)
-	TODO: check
+	NOT-FOR-US: Trigger.dev
 CVE-2026-114088 (Trigger.dev before 4.5.4 contains a hardcoded default secret vulnerabi ...)
-	TODO: check
+	NOT-FOR-US: Trigger.dev
 CVE-2026-114087 (Trigger.dev before 4.5.6 self-hosted Docker Compose deployments using  ...)
-	TODO: check
+	NOT-FOR-US: Trigger.dev
 CVE-2026-114086 (Trigger.dev before 4.5.5 contains a missing authentication vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: Trigger.dev
 CVE-2026-114085 (Trigger.dev through 4.7.6 contains a missing authentication vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: Trigger.dev
 CVE-2026-114084 (Trigger.dev before 4.5.6 contains an SQL injection vulnerability in th ...)
-	TODO: check
+	NOT-FOR-US: Trigger.dev
 CVE-2026-114083 (Trigger.dev before 4.5.0-rc.3 contains a path traversal vulnerability  ...)
-	TODO: check
+	NOT-FOR-US: Trigger.dev
 CVE-2026-114082 (Trigger.dev before 4.6.2 contains an authorization vulnerability that  ...)
-	TODO: check
+	NOT-FOR-US: Trigger.dev
 CVE-2026-114081 (Trigger.dev before 4.5.6 contains an SQL injection vulnerability in th ...)
-	TODO: check
+	NOT-FOR-US: Trigger.dev
 CVE-2026-114080 (Trigger.dev before 4.5.2 contains a blind server-side request forgery  ...)
-	TODO: check
+	NOT-FOR-US: Trigger.dev
 CVE-2026-114079 (Trigger.dev before 4.5.6 contains an improper authorization vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: Trigger.dev
 CVE-2026-114078 (Trigger.dev before 4.5.6 contains an authorization bypass vulnerabilit ...)
-	TODO: check
+	NOT-FOR-US: Trigger.dev
 CVE-2026-114077 (Trigger.dev before 4.5.6 contains an authorization bypass vulnerabilit ...)
-	TODO: check
+	NOT-FOR-US: Trigger.dev
 CVE-2026-114076 (Trigger.dev before 4.5.2 contains a blind server-side request forgery  ...)
-	TODO: check
+	NOT-FOR-US: Trigger.dev
 CVE-2026-114075 (Trigger.dev before 4.5.12 contains an authorization bypass vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: Trigger.dev
 CVE-2026-114074 (Trigger.dev before 4.5.10 contains a server-side request forgery vulne ...)
-	TODO: check
+	NOT-FOR-US: Trigger.dev
 CVE-2026-114073 (Trigger.dev CLI before 4.5.9 contains an information disclosure vulner ...)
-	TODO: check
+	NOT-FOR-US: Trigger.dev
 CVE-2026-114072 (The Trigger.dev webapp before 4.5.12 contains a cross-site request for ...)
-	TODO: check
+	NOT-FOR-US: Trigger.dev
 CVE-2026-114071 (Trigger.dev before 4.5.12 contains an authorization bypass vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: Trigger.dev
 CVE-2026-114070 (Trigger.dev 4.5.0 before 4.6.0 contains an information disclosure vuln ...)
-	TODO: check
+	NOT-FOR-US: Trigger.dev
 CVE-2026-114069 (Trigger.dev before 4.6.0 contains an improper authorization vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: Trigger.dev
 CVE-2026-114068 (Trigger.dev before 4.6.0 contains a missing authorization vulnerabilit ...)
-	TODO: check
+	NOT-FOR-US: Trigger.dev
 CVE-2026-114067 (Trigger.dev 4.5.0 before 4.6.2 contains an improper authorization vuln ...)
-	TODO: check
+	NOT-FOR-US: Trigger.dev
 CVE-2026-114066 (Trigger.dev before 4.7.0 contains a missing authorization vulnerabilit ...)
-	TODO: check
+	NOT-FOR-US: Trigger.dev
 CVE-2026-114065 (Trigger.dev before 4.7.3 contains a tenant filtering bypass vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: Trigger.dev
 CVE-2026-114064 (Snipe-IT before 8.7.0 contains a server-side request forgery vulnerabi ...)
 	TODO: check
 CVE-2026-114063 (SvelteKit (@sveltejs/kit) from 2.10.0 before 3.0.0 contains a path tra ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2dbd321759383d61908694f71d1418fdea8518c9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2dbd321759383d61908694f71d1418fdea8518c9
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261021/adb67772/attachment.htm>