[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu Oct 22 10:31:50 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7c6e4edd by Salvatore Bonaccorso at 2026-10-22T11:22:49+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -123,23 +123,23 @@ CVE-2026-96356 (Incorrect Authorization vulnerability in Drupal Webform allows F
 CVE-2026-96355 (Improper Neutralization of Special Elements Used in a Template Engine  ...)
 	NOT-FOR-US: Drupal core and addons
 CVE-2026-92210 (NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vul ...)
-	TODO: check
+	NOT-FOR-US: NoMachine nxhtd
 CVE-2026-92209 (NoMachine Redis Improper Authentication Local Privilege Escalation Vul ...)
-	TODO: check
+	NOT-FOR-US: NoMachine
 CVE-2026-92208 (NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulner ...)
-	TODO: check
+	NOT-FOR-US: NoMachine
 CVE-2026-92207 (MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: MindsDB
 CVE-2026-92206 (CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Ex ...)
-	TODO: check
+	NOT-FOR-US: CrewAI
 CVE-2026-92205 (BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation ...)
 	TODO: check
 CVE-2026-92204 (Airbyte OneDrive Connector _get_shared_drive_object Server-Side Reques ...)
-	TODO: check
+	NOT-FOR-US: Airbyte OneDrive Connector
 CVE-2026-92203 (Airbyte SharePoint Connector _get_shared_drive_object Server-Side Requ ...)
-	TODO: check
+	NOT-FOR-US: Airbyte SharePoint Connector
 CVE-2026-92202 (Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remot ...)
-	TODO: check
+	NOT-FOR-US: KeyShot
 CVE-2026-92183 (GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Executi ...)
 	TODO: check
 CVE-2026-91403 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7c6e4edd5889ddc4094b99c734df5919e29128f7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7c6e4edd5889ddc4094b99c734df5919e29128f7
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261022/324ba687/attachment.htm>


More information about the debian-security-tracker-commits mailing list