[Git][security-tracker-team/security-tracker][master] Process more NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
25ef56fd by Salvatore Bonaccorso at 2026-10-28T16:02:22+01:00
Process more NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1955,29 +1955,29 @@ CVE-2026-117555 (CImg through 4.0.6 contains a heap out-of-bounds read vulnerabi
 	NOTE: https://github.com/GreycLab/CImg/issues/495
 	NOTE: Fixed by: https://github.com/GreycLab/CImg/commit/b9ed613d9984f9caa1617b97e1db7e429cf14fd5 (v.4.0.7)
 CVE-2026-117554 (Admidio before 5.0.17 contains an improper access control vulnerabilit ...)
-	TODO: check
+	NOT-FOR-US: Admidio
 CVE-2026-117553 (Umbraco CMS before 17.7.2 and 18.2.2 contains an authentication bypass ...)
 	NOT-FOR-US: Umbraco CMS
 CVE-2026-117541 (svg-sanitizer from 0.11.0 before 1.1.0 contains an uncaught exception  ...)
-	TODO: check
+	NOT-FOR-US: darylldoyle svg-sanitizer
 CVE-2026-117540 (svg-sanitizer from 0.5.3 before 1.1.0 contains a denial of service vul ...)
-	TODO: check
+	NOT-FOR-US: darylldoyle svg-sanitizer
 CVE-2026-117539 (darylldoyle svg-sanitizer before 1.0.0 contains CSS injection and remo ...)
-	TODO: check
+	NOT-FOR-US: darylldoyle svg-sanitizer
 CVE-2026-117538 (REDAXO before 5.21.0 contains a reflected cross-site scripting vulnera ...)
-	TODO: check
+	NOT-FOR-US: REDAXO
 CVE-2026-117537 (REDAXO before 5.21.0 contains a reflected cross-site scripting vulnera ...)
-	TODO: check
+	NOT-FOR-US: REDAXO
 CVE-2026-117536 (REDAXO before 5.21.3 contains a cross-site request forgery vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: REDAXO
 CVE-2026-117535 (REDAXO before 5.21.3 contains a reflected cross-site scripting vulnera ...)
-	TODO: check
+	NOT-FOR-US: REDAXO
 CVE-2026-117534 (REDAXO before 5.21.3 contains a cross-site request forgery vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: REDAXO
 CVE-2026-117533 (REDAXO from 5.18.0 before 5.21.4 contains a stored cross-site scriptin ...)
-	TODO: check
+	NOT-FOR-US: REDAXO
 CVE-2026-117532 (REDAXO core from 5.3.0 before 5.21.4 contains an authentication bypass ...)
-	TODO: check
+	NOT-FOR-US: REDAXO
 CVE-2026-117530 (In JetBrains Junie CLI before 26.8.17 command execution was possible d ...)
 	NOT-FOR-US: JetBrains
 CVE-2026-117526 (A vulnerability was found in reduxjs redux-devtools 5.0.0. Affected by ...)
@@ -2019,21 +2019,21 @@ CVE-2026-117466 (In affected versions of Octopus Server, a user holding the Syst
 CVE-2026-117341 (In affected versions of Octopus Server, creating a user invitation wri ...)
 	NOT-FOR-US: Octopus Deploy
 CVE-2026-116900 (REDAXO before 5.21.4 contains a stored cross-site scripting vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: REDAXO
 CVE-2026-116899 (REDAXO before 5.21.4 contains a broken access control vulnerability th ...)
-	TODO: check
+	NOT-FOR-US: REDAXO
 CVE-2026-116898 (REDAXO before 5.21.4 contains a missing authorization vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: REDAXO
 CVE-2026-116897 (REDAXO core before 5.21.4 contains a missing authorization vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: REDAXO
 CVE-2026-116896 (REDAXO before 5.21.5 contains a missing authorization vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: REDAXO
 CVE-2026-116895 (REDAXO before 5.21.5 contains a cross-site request forgery vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: REDAXO
 CVE-2026-116894 (REDAXO before 5.21.5 contains an insufficient session expiration vulne ...)
-	TODO: check
+	NOT-FOR-US: REDAXO
 CVE-2026-116893 (REDAXO core before 5.21.5 contains a missing authorization vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: REDAXO
 CVE-2026-116892 (SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-s ...)
 	TODO: check
 CVE-2026-116891 (SemanticMediaWiki from 4.2.0 before 7.2.1 contains a reflected cross-s ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/25ef56fdc2f4ddf54fae071fb40097f21821a059

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/25ef56fdc2f4ddf54fae071fb40097f21821a059
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261028/df387a87/attachment-0001.htm>