[Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Thu Oct 22 10:31:50 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
7c6e4edd by Salvatore Bonaccorso at 2026-10-22T11:22:49+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -123,23 +123,23 @@ CVE-2026-96356 (Incorrect Authorization vulnerability in Drupal Webform allows F
CVE-2026-96355 (Improper Neutralization of Special Elements Used in a Template Engine ...)
NOT-FOR-US: Drupal core and addons
CVE-2026-92210 (NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vul ...)
- TODO: check
+ NOT-FOR-US: NoMachine nxhtd
CVE-2026-92209 (NoMachine Redis Improper Authentication Local Privilege Escalation Vul ...)
- TODO: check
+ NOT-FOR-US: NoMachine
CVE-2026-92208 (NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulner ...)
- TODO: check
+ NOT-FOR-US: NoMachine
CVE-2026-92207 (MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability ...)
- TODO: check
+ NOT-FOR-US: MindsDB
CVE-2026-92206 (CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Ex ...)
- TODO: check
+ NOT-FOR-US: CrewAI
CVE-2026-92205 (BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation ...)
TODO: check
CVE-2026-92204 (Airbyte OneDrive Connector _get_shared_drive_object Server-Side Reques ...)
- TODO: check
+ NOT-FOR-US: Airbyte OneDrive Connector
CVE-2026-92203 (Airbyte SharePoint Connector _get_shared_drive_object Server-Side Requ ...)
- TODO: check
+ NOT-FOR-US: Airbyte SharePoint Connector
CVE-2026-92202 (Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remot ...)
- TODO: check
+ NOT-FOR-US: KeyShot
CVE-2026-92183 (GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Executi ...)
TODO: check
CVE-2026-91403 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7c6e4edd5889ddc4094b99c734df5919e29128f7
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7c6e4edd5889ddc4094b99c734df5919e29128f7
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261022/324ba687/attachment.htm>
More information about the debian-security-tracker-commits
mailing list