[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff (@jmm) jmm at debian.org
Thu Oct 22 11:31:50 BST 2026 


Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
97b58048 by Moritz Mühlenhoff at 2026-10-22T12:21:40+02:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -602,29 +602,29 @@ CVE-2026-114404 (PHPOffice PHPPresentation 1.2.0 contains a cross-site scripting
 CVE-2026-114403 (PHPOffice PHPPresentation through 1.2.0 contains an insecure deseriali ...)
 	TODO: check
 CVE-2026-114402 (Trudesk through 1.2.11 contains a path traversal and authorization byp ...)
-	TODO: check
+	NOT-FOR-US: Trudesk
 CVE-2026-114401 (Trudesk through 1.2.11 contains a regular expression injection vulnera ...)
-	TODO: check
+	NOT-FOR-US: Trudesk
 CVE-2026-114400 (Trudesk through 1.2.11 contains a missing authentication vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Trudesk
 CVE-2026-114399 (Trudesk through 1.2.11 contains a path traversal vulnerability that al ...)
-	TODO: check
+	NOT-FOR-US: Trudesk
 CVE-2026-114398 (Trudesk through 1.2.11 contains an unrestricted file upload vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: Trudesk
 CVE-2026-114397 (Trudesk through 1.2.11 contains a missing authentication vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Trudesk
 CVE-2026-114396 (Trudesk through 1.2.11 contains a server-side JavaScript injection vul ...)
-	TODO: check
+	NOT-FOR-US: Trudesk
 CVE-2026-114395 (Trudesk through 1.2.11 contains an authorization bypass vulnerability  ...)
-	TODO: check
+	NOT-FOR-US: Trudesk
 CVE-2026-114394 (Trudesk through 1.2.11 contains an authorization bypass vulnerability  ...)
-	TODO: check
+	NOT-FOR-US: Trudesk
 CVE-2026-114393 (Trudesk through 1.2.11 contains an authorization bypass vulnerability  ...)
-	TODO: check
+	NOT-FOR-US: Trudesk
 CVE-2026-114392 (Trudesk through 1.2.11 contains an authorization bypass vulnerability  ...)
-	TODO: check
+	NOT-FOR-US: Trudesk
 CVE-2026-114391 (ZenTao PMS before 22.3 contains an authorization bypass vulnerability  ...)
-	TODO: check
+	NOT-FOR-US: ZenTao PMS
 CVE-2026-114390 (Chamilo LMS from 2.0.0-alpha.1 before 2.0.0-RC.3 contains a missing au ...)
 	NOT-FOR-US: Chamilo LMS
 CVE-2026-114389 (Chamilo LMS from 2.0.0-alpha.4 before 2.0.0-RC.3 contains a missing au ...)
@@ -632,9 +632,9 @@ CVE-2026-114389 (Chamilo LMS from 2.0.0-alpha.4 before 2.0.0-RC.3 contains a mis
 CVE-2026-114388 (Chamilo LMS 2.0.0 pre-releases from 2.0.0-alpha.1 before 2.0.0-RC.3 co ...)
 	NOT-FOR-US: Chamilo LMS
 CVE-2026-114387 (Shopper from 2.0.0 before 2.6.0 contains a missing authorization vulne ...)
-	TODO: check
+	NOT-FOR-US: Shopper
 CVE-2026-114386 (Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_ca ...)
-	TODO: check
+	NOT-FOR-US: Pydantic AI Harness
 CVE-2026-114384 (A security vulnerability has been detected in itsourcecode Online Cake ...)
 	NOT-FOR-US: itsourcecode System
 CVE-2026-114383 (A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This imp ...)
@@ -646,23 +646,23 @@ CVE-2026-114381 (A vulnerability was determined in itsourcecode Online Cake Orde
 CVE-2026-114380 (A vulnerability was found in itsourcecode Online Cake Ordering System  ...)
 	NOT-FOR-US: itsourcecode System
 CVE-2026-114379 (A flaw has been found in EKKOLearnAI ekko-studio up to 1.0.6. This vul ...)
-	TODO: check
+	NOT-FOR-US: EKKOLearnAI
 CVE-2026-114378 (A vulnerability was detected in itsourcecode Online Cake Ordering Syst ...)
 	NOT-FOR-US: itsourcecode System
 CVE-2026-114377 (A security vulnerability has been detected in leomoon-studios wiki-go  ...)
-	TODO: check
+	NOT-FOR-US: leomoon-studios wiki-go
 CVE-2026-114376 (A weakness has been identified in leomoon-studios wiki-go up to 1.9.1. ...)
-	TODO: check
+	NOT-FOR-US: leomoon-studios wiki-go
 CVE-2026-114375 (A security flaw has been discovered in leomoon-studios wiki-go up to 1 ...)
-	TODO: check
+	NOT-FOR-US: leomoon-studios wiki-go
 CVE-2026-114374 (A vulnerability was identified in leomoon-studios wiki-go up to 1.9.1. ...)
-	TODO: check
+	NOT-FOR-US: leomoon-studios wiki-go
 CVE-2026-114370 (A flaw was found in the PathResourceManager component of the Undertow  ...)
 	TODO: check
 CVE-2026-114362 (A flaw has been found in HarnessRouter up to 0.31.12. This impacts an  ...)
-	TODO: check
+	NOT-FOR-US: HarnessRouter
 CVE-2026-114361 (A vulnerability was detected in HarnessRouter up to 0.31.10. This affe ...)
-	TODO: check
+	NOT-FOR-US: HarnessRouter
 CVE-2026-114268 (A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affected by this  ...)
 	NOT-FOR-US: Tenda
 CVE-2026-114267 (A vulnerability was detected in SourceCodester Food Order Management S ...)
@@ -676,53 +676,53 @@ CVE-2026-114264 (A security flaw has been discovered in ProjectWorlds Advanced L
 CVE-2026-114263 (A vulnerability was identified in ProjectWorlds Advanced Library Manag ...)
 	NOT-FOR-US: Project Worlds
 CVE-2026-114262 (A vulnerability was determined in file-management-system dc9ce1bf27f94 ...)
-	TODO: check
+	NOT-FOR-US: file-management-system
 CVE-2026-114261 (A vulnerability was found in MomoTommy file-management-system dc9ce1bf ...)
-	TODO: check
+	NOT-FOR-US: file-management-system
 CVE-2026-114260 (A vulnerability has been found in oretnom23 file-management-system-php ...)
-	TODO: check
+	NOT-FOR-US: file-management-system-php
 CVE-2026-114259 (A flaw has been found in oretnom23 file-management-system-php up to 2e ...)
-	TODO: check
+	NOT-FOR-US: file-management-system-php
 CVE-2026-114258 (A vulnerability was detected in oretnom23 file-management-system-php u ...)
-	TODO: check
+	NOT-FOR-US: file-management-system-php
 CVE-2026-114257 (A security vulnerability has been detected in oretnom23 file-managemen ...)
-	TODO: check
+	NOT-FOR-US: file-management-system-php
 CVE-2026-114256 (A weakness has been identified in oretnom23 file-management-system-php ...)
-	TODO: check
+	NOT-FOR-US: file-management-system-php
 CVE-2026-114255 (A security flaw has been discovered in oretnom23 file-management-syste ...)
-	TODO: check
+	NOT-FOR-US: file-management-system-php
 CVE-2026-114254 (A vulnerability was identified in oretnom23 file-management-system-php ...)
-	TODO: check
+	NOT-FOR-US: file-management-system-php
 CVE-2026-114253 (A vulnerability was determined in oretnom23 file-management-system-php ...)
-	TODO: check
+	NOT-FOR-US: file-management-system-php
 CVE-2026-114252 (A vulnerability was found in itsourcecode Sales-and-Inventory-System u ...)
-	TODO: check
+	NOT-FOR-US: Sales-and-Inventory-System
 CVE-2026-114251 (A vulnerability has been found in itsourcecode Sales-and-Inventory-Sys ...)
-	TODO: check
+	NOT-FOR-US: Sales-and-Inventory-System
 CVE-2026-114250 (A flaw has been found in itsourcecode Sales-and-Inventory-System up to ...)
-	TODO: check
+	NOT-FOR-US: Sales-and-Inventory-System
 CVE-2026-114249 (A vulnerability was detected in dhikshitha29 Insurance-Management-Syst ...)
-	TODO: check
+	NOT-FOR-US: Insurance-Management-System
 CVE-2026-114248 (A security vulnerability has been detected in dhikshitha29 Insurance-M ...)
-	TODO: check
+	NOT-FOR-US: Insurance-Management-System
 CVE-2026-114245 (A weakness has been identified in dhikshitha29 Insurance-Management-Sy ...)
-	TODO: check
+	NOT-FOR-US: Insurance-Management-System
 CVE-2026-114243 (A security flaw has been discovered in dhikshitha29 Insurance-Manageme ...)
-	TODO: check
+	NOT-FOR-US: Insurance-Management-System
 CVE-2026-114242 (A vulnerability was identified in dhikshitha29 Insurance-Management-Sy ...)
-	TODO: check
+	NOT-FOR-US: Insurance-Management-System
 CVE-2026-114236 (storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when pr ...)
 	TODO: check
 CVE-2026-114223 (NT OneAPP developed by NewType Infortech has an Exposure of Sensitive  ...)
-	TODO: check
+	NOT-FOR-US: NT OneApp
 CVE-2026-114222 (NT OneAPP developed by NewType Infortech has an Authentication Bypass  ...)
-	TODO: check
+	NOT-FOR-US: NT OneApp
 CVE-2026-114221 (NT OneAPP developed by NewType Infortech has a Credential Disclosure v ...)
-	TODO: check
+	NOT-FOR-US: NT OneApp
 CVE-2026-114220 (NT OneAPP developed by NewType Infortech has an Improper Certificate V ...)
-	TODO: check
+	NOT-FOR-US: NT OneApp
 CVE-2026-114219 (NT OneAPP developed by NewType Infortech has a Hard-coded Credentials  ...)
-	TODO: check
+	NOT-FOR-US: NT OneApp
 CVE-2026-114184 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-114182 (Missing Authorization vulnerability in IdeaBox Creations PowerPack Add ...)
@@ -776,27 +776,27 @@ CVE-2026-114126 (Storybook is a frontend workshop for building user interface co
 CVE-2026-114125 (Storybook is a frontend workshop for building user interface component ...)
 	TODO: check
 CVE-2026-114124 (Electron is a framework for writing cross-platform desktop application ...)
-	TODO: check
+	- electron <itp> (bug #842420)
 CVE-2026-114123 (D365 F&O MCP Server is a Model Context Protocol server for querying Dy ...)
 	TODO: check
 CVE-2026-114122 (Electron is a framework for writing cross-platform desktop application ...)
-	TODO: check
+	- electron <itp> (bug #842420)
 CVE-2026-114121 (Electron is a framework for writing cross-platform desktop application ...)
-	TODO: check
+	- electron <itp> (bug #842420)
 CVE-2026-114120 (SchedulePress before 5.3.5 contains a missing authorization vulnerabil ...)
 	TODO: check
 CVE-2026-113870 (MongoDB Compass improperly escapes certain BSON values when converting ...)
 	TODO: check
 CVE-2026-113800 (Electron is a framework for writing cross-platform desktop application ...)
-	TODO: check
+	- electron <itp> (bug #842420)
 CVE-2026-113799 (Slack Morphism is a client library for Slack Web/Events API/Socket Mod ...)
 	TODO: check
 CVE-2026-113798 (Electron is a framework for writing cross-platform desktop application ...)
-	TODO: check
+	- electron <itp> (bug #842420)
 CVE-2026-113797 (Electron is a framework for writing cross-platform desktop application ...)
-	TODO: check
+	- electron <itp> (bug #842420)
 CVE-2026-113796 (Electron is a framework for writing cross-platform desktop application ...)
-	TODO: check
+	- electron <itp> (bug #842420)
 CVE-2026-113795 (pypdf is a free and open-source pure-python PDF library. Prior to 6.20 ...)
 	TODO: check
 CVE-2026-113794 (pypdf is a free and open-source pure-python PDF library. Prior to 6.20 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/97b58048b8b5d1487aa2b29d55d89e309a6eff7d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/97b58048b8b5d1487aa2b29d55d89e309a6eff7d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261022/076e80d7/attachment-0001.htm>

More information about the debian-security-tracker-commits mailing list