[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
87a20658 by security tracker role at 2026-10-24T19:15:51+00:00
automatic NOT-FOR-US entries update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,5 +1,5 @@
 CVE-2026-94075 (Deserialization of Untrusted Data vulnerability in Tribulant Software  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-116020 (BookStack before 26.09.2 contains an incorrect authorization vulnerabi ...)
 	TODO: check
 CVE-2026-116019 (Grav 2.0.15 before 2.2.13 contains an allowlist bypass vulnerability t ...)
@@ -53,43 +53,43 @@ CVE-2026-115557 (Python has added a denylist for known compromised certificates
 CVE-2026-114820 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
 	TODO: check
 CVE-2026-114705 (Missing Authorization vulnerability in quadlayers WP Social Feed Galle ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-114704 (Deserialization of Untrusted Data vulnerability in Christoph Vielgrade ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-114697 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-114695 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-114694 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-114693 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-114196 (Deserialization of Untrusted Data vulnerability in paytiumsupport Payt ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-114194 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-114192 (Missing Authorization vulnerability in Magepeople inc. WpEvently mage- ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-114191 (Missing Authorization vulnerability in Knit Pay UPI QR Code Payment Ga ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-114190 (Insertion of Sensitive Information Into Sent Data vulnerability in Hai ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-114179 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-114178 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-112869 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-112866 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-112844 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-111402 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-110892 (Missing Authorization vulnerability in Brainstorm Force SureDash sured ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-110018 (The aBlocks \u2013 Gutenberg Blocks, User Dashboard Builder, Popup Bui ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-114629 (Web::Simple versions before 0.035 for Perl allocate a buffer sized by  ...)
 	- libweb-simple-perl <unfixed>
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/44599125/



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/87a20658aaa0291b200c771c9b6d39e1937cebcb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/87a20658aaa0291b200c771c9b6d39e1937cebcb
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261024/fee60537/attachment-0001.htm>