[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f02e9113 by Salvatore Bonaccorso at 2026-10-26T05:55:37+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -23,7 +23,7 @@ CVE-2026-116199 (Snipe-IT before 8.6.3 contains an authentication bypass in Goog
 CVE-2026-116198 (Snipe-IT before 8.7.0 contains a missing encryption vulnerability in A ...)
 	- snipe-it <itp> (bug #1005172)
 CVE-2026-116197 (Edgeless Systems Contrast from 1.21.0 before 1.25.0 contains a non-det ...)
-	TODO: check
+	NOT-FOR-US: Edgeless Systems Contrast
 CVE-2026-116196 (Rclone before v1.75.2 contains a credential exposure vulnerability in  ...)
 	- rclone 1.75.2-1
 	NOTE: https://github.com/rclone/rclone/security/advisories/GHSA-gpw7-77cq-9f72
@@ -214,25 +214,25 @@ CVE-2026-116140 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 incorrectl
 CVE-2026-116139 (WWBN AVideo 26.0 through 29.3.0 contains a stored cross-site scripting ...)
 	NOT-FOR-US: WWBN AVideo
 CVE-2026-116137 (adm-zip through 0.6.1 contains a duplicate-entry validation bypass tha ...)
-	TODO: check
+	NOT-FOR-US: adm-zip
 CVE-2026-116136 (ProjectSend 2.0.0 through 2.7.1 contains an incomplete authorization v ...)
-	TODO: check
+	NOT-FOR-US: ProjectSend
 CVE-2026-116073 (Leon before commit 50df142 contains a path traversal vulnerability in  ...)
-	TODO: check
+	NOT-FOR-US: Leon
 CVE-2026-116072 (Infinity for Reddit through 8.3.4 contains a login cross-site request  ...)
-	TODO: check
+	NOT-FOR-US: Infinity for Reddit
 CVE-2026-116071 (rotki before 1.44.2 contains a weak key derivation vulnerability that  ...)
-	TODO: check
+	NOT-FOR-US: rotki
 CVE-2026-116070 (Docker-Proxy through 5.1.9 contains a missing authentication vulnerabi ...)
 	TODO: check
 CVE-2026-116069 (NiubiGEO before 0.3.2 contains an unauthenticated server-side request  ...)
-	TODO: check
+	NOT-FOR-US: NiubiGEO
 CVE-2026-116068 (Dokploy through 0.30.10 contains an authorization bypass vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Dokploy
 CVE-2026-116067 (Paisa before 0.7.8 contains a path traversal vulnerability in the GetF ...)
-	TODO: check
+	NOT-FOR-US: Paisa
 CVE-2026-116066 (Firecrawl before 2.11.586 contains a server-side request forgery vulne ...)
-	TODO: check
+	NOT-FOR-US: Firecrawl
 CVE-2026-116063 (A weakness has been identified in DedeCMS up to 5.7.118. Impacted is t ...)
 	NOT-FOR-US: DedeCMS
 CVE-2026-116062 (A security flaw has been discovered in SourceCodester Performance Indi ...)
@@ -242,27 +242,27 @@ CVE-2026-116061 (A vulnerability was identified in SourceCodester Performance In
 CVE-2026-116060 (A vulnerability was determined in SourceCodester Performance Indicator ...)
 	NOT-FOR-US: SourceCodester
 CVE-2026-116058 (A vulnerability was found in Alfresco Activiti up to 7.21.0-rc.692. Af ...)
-	TODO: check
+	NOT-FOR-US: Alfresco Activiti
 CVE-2026-116057 (A vulnerability has been found in KodCloud KodExplorer up to 4.55. Aff ...)
-	TODO: check
+	NOT-FOR-US: KodCloud KodExplorer
 CVE-2026-116056 (A flaw has been found in KodCloud KodExplorer up to 4.56. Affected is  ...)
-	TODO: check
+	NOT-FOR-US: KodCloud KodExplorer
 CVE-2026-116055 (A vulnerability was detected in SourceCodester Performance Indicator S ...)
 	NOT-FOR-US: SourceCodester
 CVE-2026-116054 (A security vulnerability has been detected in SH3. This affects an unk ...)
-	TODO: check
+	NOT-FOR-US: SH3
 CVE-2026-116053 (A weakness has been identified in dbcli mycli up to 2.29.4/2.30.1. The ...)
 	TODO: check
 CVE-2026-116052 (A security flaw has been discovered in LinkStackOrg LinkStack up to 4. ...)
-	TODO: check
+	NOT-FOR-US: LinkStack
 CVE-2026-116050 (A vulnerability has been found in krupalshah Employee Recruitment Syst ...)
-	TODO: check
+	NOT-FOR-US: krupalshah Employee Recruitment System
 CVE-2026-116049 (A flaw has been found in krupalshah EmployeeRecruitmentSystem up to 92 ...)
-	TODO: check
+	NOT-FOR-US: krupalshah Employee Recruitment System
 CVE-2026-116048 (A vulnerability was detected in krupalshah EmployeeRecruitmentSystem u ...)
-	TODO: check
+	NOT-FOR-US: krupalshah Employee Recruitment System
 CVE-2026-116047 (A vulnerability has been found in Privoce Vocechat up to 0.9.121. This ...)
-	TODO: check
+	NOT-FOR-US: Privoce Vocechat
 CVE-2026-115825 (HTTP::Server::PSGI versions before 1.0056 for Perl allow a single requ ...)
 	- libplack-perl 1.0057-1 (bug #1152055)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/44625163/



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f02e9113274d85a0abab28ffbf4a36f2787ae971

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f02e9113274d85a0abab28ffbf4a36f2787ae971
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261026/f3a1f34c/attachment.htm>