[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sun Oct 25 19:20:50 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
b54e5a35 by security tracker role at 2026-10-25T19:16:40+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,19 +1,19 @@
CVE-2026-116211 (YesWiki 4.5.0 before 4.7.0 contains an SQL injection vulnerability in ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-116208 (YesWiki from 4.6.2 before 4.7.0 contains a missing authorization vulne ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-116207 (YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 contai ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-116206 (YesWiki from 4.2.0 before 4.7.0 contains a stored cross-site scripting ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-116205 (YesWiki before 4.7.0 contains an unauthenticated server-side request f ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-116204 (YesWiki before 4.7.0 contains a cross-site request forgery vulnerabili ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-116203 (YesWiki before 4.7.0 contains a stored cross-site scripting vulnerabil ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-116202 (YesWiki before 4.7.0 contains a stored cross-site scripting vulnerabil ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-116201 (Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability t ...)
TODO: check
CVE-2026-116200 (Snipe-IT before 8.6.3 ignores the ldap_start_tls() return value in Lda ...)
@@ -51,9 +51,9 @@ CVE-2026-116185 (OpenRemote core before 1.31.0 contains an authorization bypass
CVE-2026-116184 (OpenRemote before 1.31.0 contains an authorization bypass vulnerabilit ...)
TODO: check
CVE-2026-116183 (phpMyFAQ before 4.1.10 contains an object-level authorization bypass v ...)
- TODO: check
+ NOT-FOR-US: phpMyFAQ
CVE-2026-116182 (phpMyFAQ before 4.1.10 contains a server-side request forgery vulnerab ...)
- TODO: check
+ NOT-FOR-US: phpMyFAQ
CVE-2026-116181 (vLLM from 0.20.1 before 0.29.0 contains an improper input validation v ...)
TODO: check
CVE-2026-116180 (vLLM from 0.8.5 before 0.31.0 has a denial of service flaw. LogprobsTe ...)
@@ -75,27 +75,27 @@ CVE-2026-116173 (vLLM from 0.22.0 before 0.24.0 contains a denial of service vul
CVE-2026-116172 (vLLM from 0.22.0 before 0.24.0 contains an improper input validation v ...)
TODO: check
CVE-2026-116171 (SiYuan 3.5.4 before 3.8.7 on Windows contains a sensitive-path denylis ...)
- TODO: check
+ NOT-FOR-US: SiYuan
CVE-2026-116170 (SiYuan before v3.8.7 contains an sql injection vulnerability that allo ...)
- TODO: check
+ NOT-FOR-US: SiYuan
CVE-2026-116169 (SiYuan from 2.10.0 before 3.8.7 contains a stored cross-site scripting ...)
- TODO: check
+ NOT-FOR-US: SiYuan
CVE-2026-116168 (SiYuan before 3.8.7 contains a path traversal vulnerability in the MCP ...)
- TODO: check
+ NOT-FOR-US: SiYuan
CVE-2026-116167 (SiYuan from 2.9.0 before 3.8.7 contains a cross-site scripting vulnera ...)
- TODO: check
+ NOT-FOR-US: SiYuan
CVE-2026-116166 (SiYuan 3.6.0 before 3.8.7 accepts and persists the networkServeTLS set ...)
- TODO: check
+ NOT-FOR-US: SiYuan
CVE-2026-116165 (Parse Server before 8.6.101 and 9.0.0 before 9.10.4-alpha.4 contains a ...)
- TODO: check
+ NOT-FOR-US: Parse Server
CVE-2026-116164 (Parse Server before 8.6.100 and 9.0.0 before 9.10.4-alpha.3 does not r ...)
- TODO: check
+ NOT-FOR-US: Parse Server
CVE-2026-116163 (Parse Server before 8.6.102 and 9.0.0 before 9.10.5-alpha.2 contains a ...)
- TODO: check
+ NOT-FOR-US: Parse Server
CVE-2026-116162 (Parse Server before 8.6.104 and 9.0.0 before 9.10.5-alpha.5 saves the ...)
- TODO: check
+ NOT-FOR-US: Parse Server
CVE-2026-116161 (Parse Server before 8.6.103 and 9.0.0 before 9.10.5-alpha.4 contains a ...)
- TODO: check
+ NOT-FOR-US: Parse Server
CVE-2026-116160 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a heap-b ...)
TODO: check
CVE-2026-116159 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory ...)
@@ -139,7 +139,7 @@ CVE-2026-116141 (ImageMagick before 7.1.2-33 contains a policy bypass vulnerabil
CVE-2026-116140 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 incorrectly parse ...)
TODO: check
CVE-2026-116139 (WWBN AVideo 26.0 through 29.3.0 contains a stored cross-site scripting ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-116137 (adm-zip through 0.6.1 contains a duplicate-entry validation bypass tha ...)
TODO: check
CVE-2026-116136 (ProjectSend 2.0.0 through 2.7.1 contains an incomplete authorization v ...)
@@ -161,13 +161,13 @@ CVE-2026-116067 (Paisa before 0.7.8 contains a path traversal vulnerability in t
CVE-2026-116066 (Firecrawl before 2.11.586 contains a server-side request forgery vulne ...)
TODO: check
CVE-2026-116063 (A weakness has been identified in DedeCMS up to 5.7.118. Impacted is t ...)
- TODO: check
+ NOT-FOR-US: DedeCMS
CVE-2026-116062 (A security flaw has been discovered in SourceCodester Performance Indi ...)
- TODO: check
+ NOT-FOR-US: SourceCodester
CVE-2026-116061 (A vulnerability was identified in SourceCodester Performance Indicator ...)
- TODO: check
+ NOT-FOR-US: SourceCodester
CVE-2026-116060 (A vulnerability was determined in SourceCodester Performance Indicator ...)
- TODO: check
+ NOT-FOR-US: SourceCodester
CVE-2026-116058 (A vulnerability was found in Alfresco Activiti up to 7.21.0-rc.692. Af ...)
TODO: check
CVE-2026-116057 (A vulnerability has been found in KodCloud KodExplorer up to 4.55. Aff ...)
@@ -175,7 +175,7 @@ CVE-2026-116057 (A vulnerability has been found in KodCloud KodExplorer up to 4.
CVE-2026-116056 (A flaw has been found in KodCloud KodExplorer up to 4.56. Affected is ...)
TODO: check
CVE-2026-116055 (A vulnerability was detected in SourceCodester Performance Indicator S ...)
- TODO: check
+ NOT-FOR-US: SourceCodester
CVE-2026-116054 (A security vulnerability has been detected in SH3. This affects an unk ...)
TODO: check
CVE-2026-116053 (A weakness has been identified in dbcli mycli up to 2.29.4/2.30.1. The ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b54e5a35d38eeec2bbe1cb3edac8a943acbd71d6
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b54e5a35d38eeec2bbe1cb3edac8a943acbd71d6
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261025/b4a2978f/attachment.htm>
More information about the debian-security-tracker-commits
mailing list