[Git][security-tracker-team/security-tracker][master] NFUs

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
60992ada by Moritz Muehlenhoff at 2026-10-25T00:17:52+02:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,53 +1,53 @@
 CVE-2026-94075 (Deserialization of Untrusted Data vulnerability in Tribulant Software  ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-116020 (BookStack before 26.09.2 contains an incorrect authorization vulnerabi ...)
-	TODO: check
+	NOT-FOR-US: BookStack
 CVE-2026-116019 (Grav 2.0.15 before 2.2.13 contains an allowlist bypass vulnerability t ...)
-	TODO: check
+	NOT-FOR-US: Grav
 CVE-2026-116018 (ONEARMY community-platform before 2.165.2 contains an insecure direct  ...)
-	TODO: check
+	NOT-FOR-US: ONEARMY community-platform
 CVE-2026-116017 (Xiaozhi-esp32-server before 0.9.8 contains an insecure direct object r ...)
-	TODO: check
+	NOT-FOR-US: Xiaozhi-esp32-server
 CVE-2026-116016 (yudao-cloud through 2026.09 contains an authorization bypass vulnerabi ...)
-	TODO: check
+	NOT-FOR-US: yudao-cloud
 CVE-2026-116015 (yudao-cloud through 2026.09 contains an insecure direct object referen ...)
-	TODO: check
+	NOT-FOR-US: yudao-cloud
 CVE-2026-116014 (open62541 1.5.0 before 1.5.7 contains an integer overflow in UA_DataTy ...)
 	TODO: check
 CVE-2026-116013 (OpenResty lua-resty-dns before 0.24 contains an improper input validat ...)
 	TODO: check
 CVE-2026-116012 (Ghidra before 12.2 contains a numeric truncation vulnerability in Pack ...)
-	TODO: check
+	- ghidra <itp> (bug #923851)
 CVE-2026-116011 (Crow before 1.3.4 contains an uncontrolled recursion vulnerability in  ...)
-	TODO: check
+	NOT-FOR-US: Crow
 CVE-2026-116010 (RosarioSIS before 12.9.1 contains a missing authorization vulnerabilit ...)
-	TODO: check
+	NOT-FOR-US: RosarioSIS
 CVE-2026-116009 (Camaleon CMS before 2.9.3 contains a path traversal vulnerability that ...)
-	TODO: check
+	NOT-FOR-US: Camaleon CMS
 CVE-2026-116008 (DaybydayCRM through 2.2.1 contains a missing authorization vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: DaybydayCRM
 CVE-2026-115998 (IDOR in Cervantes version v1.3-beta could allow an authenticated attac ...)
-	TODO: check
+	NOT-FOR-US: Cervantes
 CVE-2026-115994 (BOLA Allows Cross-Project Target Tampering in Cervantes version v1.3-b ...)
-	TODO: check
+	NOT-FOR-US: Cervantes
 CVE-2026-115993 (Stored XSS vulnerability in the \u201cNotes\u201d field of the Checkli ...)
-	TODO: check
+	NOT-FOR-US: Cervantes
 CVE-2026-115975 (Broken access control in JiraController in Cervantes version v1.3-beta ...)
-	TODO: check
+	NOT-FOR-US: Cervantes
 CVE-2026-115973 (A vulnerability was identified in FaveoSuite Faveo Helpdesk 2.0.3. Aff ...)
-	TODO: check
+	NOT-FOR-US: Faveo Helpdesk
 CVE-2026-115972 (A vulnerability was determined in FaveoSuite Faveo Helpdesk up to 2.0. ...)
-	TODO: check
+	NOT-FOR-US: Faveo Helpdesk
 CVE-2026-115971 (A vulnerability was found in Travisun Opptrix 0.4.0. Affected is the f ...)
-	TODO: check
+	NOT-FOR-US: Travisun Opptrix
 CVE-2026-115970 (A vulnerability has been found in Travisun Opptrix 0.4.0. This impacts ...)
-	TODO: check
+	NOT-FOR-US: Travisun Opptrix
 CVE-2026-115969 (A flaw has been found in Travisun Opptrix 0.4.0. This affects an unkno ...)
-	TODO: check
+	NOT-FOR-US: Travisun Opptrix
 CVE-2026-115933 (Postiz signs its session, invitation and password reset tokens with on ...)
-	TODO: check
+	NOT-FOR-US: Postiz
 CVE-2026-115932 (When a post is published, Postiz treats a media path that is not a web ...)
-	TODO: check
+	NOT-FOR-US: Postiz
 CVE-2026-115557 (Python has added a denylist for known compromised certificates to the  ...)
 	TODO: check
 CVE-2026-114820 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/60992adadca34704a3740fae187a6737437164a3

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/60992adadca34704a3740fae187a6737437164a3
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261024/cc8b2bdc/attachment-0001.htm>