[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Oct 27 14:17:29 GMT 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
530d70e3 by Salvatore Bonaccorso at 2026-10-27T15:09:58+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -253,35 +253,35 @@ CVE-2026-116821 (YesWiki before 4.7.0 contains a read-ACL bypass in AclService::
 CVE-2026-116820 (YesWiki from 4.6.0 before 4.7.0 contains an information disclosure vul ...)
 	NOT-FOR-US: YesWiki
 CVE-2026-116819 (OpenPanel before 3.0.0 contains an information disclosure vulnerabilit ...)
-	TODO: check
+	NOT-FOR-US: OpenPanel
 CVE-2026-116818 (OpenPanel before 3.0.0 contains an unauthenticated ClickHouse sql inje ...)
-	TODO: check
+	NOT-FOR-US: OpenPanel
 CVE-2026-116817 (OpenPanel before 3.0.0 contains a missing authentication vulnerability ...)
-	TODO: check
+	NOT-FOR-US: OpenPanel
 CVE-2026-116816 (llama.cpp b5899 before b10261 contains a heap out-of-bounds write vuln ...)
 	TODO: check
 CVE-2026-116815 (OpenPanel before 3.0.0 contains an improper escaping vulnerability in  ...)
-	TODO: check
+	NOT-FOR-US: OpenPanel
 CVE-2026-116814 (OpenPanel before 3.0.0 contains an information exposure vulnerability  ...)
-	TODO: check
+	NOT-FOR-US: OpenPanel
 CVE-2026-116813 (OpenPanel before 3.0.0 contains an sql injection vulnerability in Conv ...)
-	TODO: check
+	NOT-FOR-US: OpenPanel
 CVE-2026-116812 (OpenPanel before 3.0.0 contains a sql injection vulnerability in profi ...)
-	TODO: check
+	NOT-FOR-US: OpenPanel
 CVE-2026-116811 (OpenPanel before 3.0.0 contains a sandbox escape vulnerability in the  ...)
-	TODO: check
+	NOT-FOR-US: OpenPanel
 CVE-2026-116810 (OpenPanel before 3.0.0 contains a missing authorization vulnerability  ...)
-	TODO: check
+	NOT-FOR-US: OpenPanel
 CVE-2026-116809 (OpenPanel before 3.0.0 contains a missing authorization vulnerability  ...)
-	TODO: check
+	NOT-FOR-US: OpenPanel
 CVE-2026-116808 (OpenPanel before 3.0.0 contains an sql injection vulnerability that al ...)
-	TODO: check
+	NOT-FOR-US: OpenPanel
 CVE-2026-116807 (OpenPanel before 3.0.0 contains an sql injection vulnerability that al ...)
-	TODO: check
+	NOT-FOR-US: OpenPanel
 CVE-2026-116806 (OpenPanel before 3.0.0 contains a missing authorization vulnerability  ...)
-	TODO: check
+	NOT-FOR-US: OpenPanel
 CVE-2026-116805 (OpenPanel before 3.0.0 contains an information disclosure vulnerabilit ...)
-	TODO: check
+	NOT-FOR-US: OpenPanel
 CVE-2026-116804 (DOMPurify from 3.4.4 before 3.4.17 contains a SAFE_FOR_TEMPLATES bypas ...)
 	TODO: check
 CVE-2026-116803 (DOMPurify before 3.4.17 contains a cross-site scripting vulnerability  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/530d70e323b163167def10fc07bafd31293e4fc2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/530d70e323b163167def10fc07bafd31293e4fc2
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261027/d5c8a3f5/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list