[Git][security-tracker-team/security-tracker][master] automatic update

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
84af96e2 by security tracker role at 2026-10-25T07:13:18+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,65 @@
+CVE-2026-94295 (The Chikkili- Google Pay India for Woocommerce WordPress plugin throug ...)
+	TODO: check
+CVE-2026-89284
+	REJECTED
+CVE-2026-116046 (A flaw has been found in eventcatalog sdk up to 2.29.0. This vulnerabi ...)
+	TODO: check
+CVE-2026-116045 (A vulnerability was detected in 1999AZZAR designer-mcp up to 2.1.0. Th ...)
+	TODO: check
+CVE-2026-116044 (A security vulnerability has been detected in prasathmani TinyFileMana ...)
+	TODO: check
+CVE-2026-116007 (A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026 ...)
+	TODO: check
+CVE-2026-116006 (A vulnerability was detected in YunaiV/zhijiantianya ruoyi-vue-pro up  ...)
+	TODO: check
+CVE-2026-116004 (A security vulnerability has been detected in onyx-dot-app Onyx up to  ...)
+	TODO: check
+CVE-2026-116000 (A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. T ...)
+	TODO: check
+CVE-2026-115999 (A vulnerability has been found in mansi-k Restaurant_IMS d7ad49f61ab7c ...)
+	TODO: check
+CVE-2026-115997 (A flaw has been found in pig-mesh pig up to 4.1.0. This impacts the fu ...)
+	TODO: check
+CVE-2026-115996 (A vulnerability was detected in Unitree Robotics Unitree Go2 up to 1.1 ...)
+	TODO: check
+CVE-2026-115995 (A security vulnerability has been detected in Unitree Robotics Unitree ...)
+	TODO: check
+CVE-2026-115982 (A vulnerability was detected in phpIPAM up to 1.8.3. Affected by this  ...)
+	TODO: check
+CVE-2026-115981 (A security vulnerability has been detected in phpIPAM up to 1.8.3. Aff ...)
+	TODO: check
+CVE-2026-115251 (The Duplicator  WordPress plugin before 5.0.0 does not restrict its on ...)
+	TODO: check
+CVE-2026-115214 (The Datawiza Proxy Auth Plugin  WordPress plugin before 1.1.1 does not ...)
+	TODO: check
+CVE-2026-115183 (The Qi Addons For Elementor WordPress plugin before 1.11.2 does not pr ...)
+	TODO: check
+CVE-2026-114743 (The InstaWP Connect  WordPress plugin before 0.1.4.2 does not perform  ...)
+	TODO: check
+CVE-2026-114742 (The WPVR  WordPress plugin before 9.0.3 does not perform object-level  ...)
+	TODO: check
+CVE-2026-114741 (The WPVR  WordPress plugin before 9.0.3 does not perform object-level  ...)
+	TODO: check
+CVE-2026-114740 (The WPVR  WordPress plugin before 9.1.3 does not correctly check user  ...)
+	TODO: check
+CVE-2026-111981 (The GiveWP  WordPress plugin before 4.19.0.1 does not perform a capabi ...)
+	TODO: check
+CVE-2026-111980 (The GiveWP  WordPress plugin before 4.19.0.1 does not correctly determ ...)
+	TODO: check
+CVE-2026-111979 (The GiveWP  WordPress plugin before 4.19.0.1 does not properly sanitis ...)
+	TODO: check
+CVE-2026-111978 (The GiveWP  WordPress plugin before 4.19.0.1 does not properly validat ...)
+	TODO: check
+CVE-2026-111976 (The GiveWP  WordPress plugin before 4.19.0.1 does not perform any stat ...)
+	TODO: check
+CVE-2026-111326
+	REJECTED
+CVE-2026-110285 (The WP Stripe Checkout WordPress plugin before 1.2.2.62 does not verif ...)
+	TODO: check
+CVE-2026-109111
+	REJECTED
+CVE-2025-15705 (The Contact Form by Supsystic  WordPress plugin before 1.8.0 does not  ...)
+	TODO: check
 CVE-2026-94075 (Deserialization of Untrusted Data vulnerability in Tribulant Software  ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-116020 (BookStack before 26.09.2 contains an incorrect authorization vulnerabi ...)
@@ -54614,6 +54676,7 @@ CVE-2026-90053 (In the Linux kernel, the following vulnerability has been resolv
 	- linux 7.2.6-1
 	NOTE: https://git.kernel.org/linus/729c4896ab829169f95915d65edd530325910b37 (7.3-rc1)
 CVE-2026-93894 (In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability w ...)
+	{DSA-6584-1}
 	- vinyl-cache <unfixed> (bug #1148187)
 	- varnish <removed>
 	[bookworm] - varnish <postponed> (Minor issue, DoS)
@@ -207708,6 +207771,7 @@ CVE-2026-3457 (Improper Neutralization of Input During Web Page Generation (XSS
 CVE-2026-3098 (The Smart Slider 3 plugin for WordPress is vulnerable to Arbitrary Fil ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-34475 (Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in ...)
+	{DSA-6584-1}
 	- vinyl-cache <not-affected> (Fixed before initial upload to Debian)
 	- varnish <removed> (bug #1132231)
 	[bookworm] - varnish <no-dsa> (Minor issue; can be mitigated by VCL rule)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/84af96e26b183a12a5a5a89558f334c64b1c182a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/84af96e26b183a12a5a5a89558f334c64b1c182a
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261025/90bd15c2/attachment.htm>