[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Oct 23 14:36:37 BST 2026 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
07770036 by Salvatore Bonaccorso at 2026-10-23T15:35:28+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -338,9 +338,9 @@ CVE-2026-115416 (Incorrect authorization checks in Amazon Athena engine version
 CVE-2026-115414 (OS command injection in the Terraform hook in AWS SAM CLI before 1.166 ...)
 	NOT-FOR-US: Amazon
 CVE-2026-115411 (crawlseo before version 0.2.4 contains a server-side request forgery v ...)
-	TODO: check
+	NOT-FOR-US: crawlseo
 CVE-2026-115400 (crawlseo before version 0.2.5 contains a cleartext storage vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: crawlseo
 CVE-2026-115398 (Ghidra before 12.2 contains a resource allocation without limits vulne ...)
 	- ghidra <itp> (bug #923851)
 CVE-2026-115397 (Ghidra before 12.2 contains a resource allocation without limits vulne ...)
@@ -445,21 +445,21 @@ CVE-2026-115330 (Lotus through 0.10.2 contains an sql injection vulnerability th
 CVE-2026-115329 (Lotus through 0.10.2 contains an insecure direct object reference vuln ...)
 	NOT-FOR-US: Lotus
 CVE-2026-115328 (JSON-SCADA before 0.65-alpha contains an sql injection vulnerability i ...)
-	TODO: check
+	NOT-FOR-US: JSON-SCADA
 CVE-2026-115327 (libyang through 6.4.13 contains an uninitialized pointer free vulnerab ...)
 	TODO: check
 CVE-2026-115326 (QloApps through 1.7.0 contains an insecure direct object reference vul ...)
-	TODO: check
+	NOT-FOR-US: QloApps
 CVE-2026-115325 (Netmaker through 1.7.0 contains an authorization bypass vulnerability  ...)
-	TODO: check
+	NOT-FOR-US: Netmaker
 CVE-2026-115324 (mem0 0.1.117 before 1.0.8 contains an sql injection vulnerability in m ...)
-	TODO: check
+	NOT-FOR-US: mem0
 CVE-2026-115323 (EverShop 1.2.2 before 2.2.1 contains a missing authorization vulnerabi ...)
-	TODO: check
+	NOT-FOR-US: EverShop
 CVE-2026-115322 (Bytebase before 3.16.0 contains an authorization bypass vulnerability  ...)
-	TODO: check
+	NOT-FOR-US: Bytebase
 CVE-2026-115321 (Bytebase before 3.16.0 contains an authorization bypass vulnerability  ...)
-	TODO: check
+	NOT-FOR-US: Bytebase
 CVE-2026-115319 (fzf 0.36.0 through 0.74.5 contains an inefficient algorithmic complexi ...)
 	TODO: check
 CVE-2026-115253 (An incorrect permission assignment vulnerability in the WatchGuard Age ...)
@@ -620,7 +620,7 @@ CVE-2026-113874 (SmileCDR HAPI FHIR allows an untrusted bundle body to replace a
 CVE-2026-113873 (SmileCDR HAPI FHIR does not properly handle highly compressed data, al ...)
 	TODO: check
 CVE-2026-113872 (multer is a middleware for Node.js that handles multipart/form-data fi ...)
-	TODO: check
+	NOT-FOR-US: Node multer
 CVE-2026-113582 (UNSUPPORTED WHEN ASSIGNED Improper restriction of XML external entity  ...)
 	TODO: check
 CVE-2026-113501 (The LiteSpeed Cache WordPress plugin before 7.9.2 does not perform a c ...)
@@ -4093,7 +4093,7 @@ CVE-2026-101823 (Vulnerability in the Oracle Bills of Material product of Oracle
 CVE-2026-101822 (Vulnerability in the Oracle Bills of Material product of Oracle E-Busi ...)
 	NOT-FOR-US: Oracle
 CVE-2026-101821 (Vulnerability in the Oracle Compensation Workbench product of Oracle E ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-101820 (Vulnerability in the Oracle General Ledger product of Oracle E-Busines ...)
 	NOT-FOR-US: Oracle
 CVE-2026-101819 (Vulnerability in the Oracle General Ledger product of Oracle E-Busines ...)
@@ -4621,7 +4621,7 @@ CVE-2026-101548 (Vulnerability in Oracle Application Testing Suite (component: O
 CVE-2026-101547 (Vulnerability in the Oracle Demand Planning product of Oracle Supply C ...)
 	NOT-FOR-US: Oracle
 CVE-2026-101546 (Vulnerability in the Oracle Materials Requirement Planning product of  ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-101545 (Vulnerability in the Oracle Inventory Management product of Oracle E-B ...)
 	NOT-FOR-US: Oracle
 CVE-2026-101544 (Vulnerability in the Oracle Payroll product of Oracle E-Business Suite ...)
@@ -4692,7 +4692,7 @@ CVE-2026-101512 (Vulnerability in the RDBMS component of Oracle Database Server.
 CVE-2026-101511 (Vulnerability in the Oracle Enterprise Manager Base Platform product o ...)
 	NOT-FOR-US: Oracle
 CVE-2026-101510 (Vulnerability in the Oracle Net Services component of Oracle Database  ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-101508 (Vulnerability in the Siebel CRM Integration product of Oracle Siebel C ...)
 	NOT-FOR-US: Oracle
 CVE-2026-101507 (Vulnerability in Oracle Trusted Answer Search (component: PLSQL packag ...)
@@ -4738,7 +4738,7 @@ CVE-2026-101487 (Vulnerability in the PeopleSoft Enterprise PeopleTools product
 CVE-2026-101486 (Vulnerability in the PeopleSoft Enterprise PeopleTools product of Orac ...)
 	NOT-FOR-US: Oracle
 CVE-2026-101485 (Vulnerability in Oracle Autonomous Health Framework (component: Trace  ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-101484 (Vulnerability in Oracle Secure Backup (component: Backup and Restore). ...)
 	NOT-FOR-US: Oracle
 CVE-2026-101483 (Vulnerability in Oracle Secure Backup (component: Device Management an ...)
@@ -4752,9 +4752,9 @@ CVE-2026-101480 (Vulnerability in Oracle Secure Backup (component: NDMP daemon).
 CVE-2026-101479 (Vulnerability in Oracle Secure Backup (component: Backup and Restore). ...)
 	NOT-FOR-US: Oracle
 CVE-2026-101478 (Vulnerability in Oracle Autonomous Health Framework (component: Trace  ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-101477 (Vulnerability in Oracle Autonomous Health Framework (component: Trace  ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-101476 (Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel  ...)
 	NOT-FOR-US: Oracle
 CVE-2026-101475 (Vulnerability in the Primavera Unifier product of Oracle Construction  ...)
@@ -4804,7 +4804,7 @@ CVE-2026-101454 (Vulnerability in the Siebel CRM Development product of Oracle S
 CVE-2026-101453 (Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CR ...)
 	NOT-FOR-US: Oracle
 CVE-2026-101452 (Vulnerability in Oracle Autonomous Health Framework (component: AHF In ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-101451 (Vulnerability in the Siebel Life Sciences product of Oracle Siebel CRM ...)
 	NOT-FOR-US: Oracle
 CVE-2026-101450 (Vulnerability in the PeopleSoft Enterprise PeopleTools product of Orac ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/07770036f99de6e5750baa2f7bb74c014af44e1c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/07770036f99de6e5750baa2f7bb74c014af44e1c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261023/f6ae18e3/attachment.htm>

More information about the debian-security-tracker-commits mailing list