[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Oct 28 15:25:07 GMT 2026 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ef303fe5 by Salvatore Bonaccorso at 2026-10-28T16:24:48+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1984,37 +1984,37 @@ CVE-2026-117526 (A vulnerability was found in reduxjs redux-devtools 5.0.0. Affe
 	- node-redux-devtools <unfixed>
 	NOTE: https://github.com/reduxjs/redux-devtools/issues/2125
 CVE-2026-117516 (A weakness has been identified in oretnom23 php-travel-agency-system.  ...)
-	TODO: check
+	NOT-FOR-US: oretnom23 php-travel-agency-system
 CVE-2026-117515 (A security flaw has been discovered in oretnom23 php-travel-agency-sys ...)
-	TODO: check
+	NOT-FOR-US: oretnom23 php-travel-agency-system
 CVE-2026-117514 (A vulnerability was identified in oretnom23 php-travel-agency-system.  ...)
-	TODO: check
+	NOT-FOR-US: oretnom23 php-travel-agency-system
 CVE-2026-117513 (A vulnerability was determined in oretnom23 php-travel-agency-system.  ...)
-	TODO: check
+	NOT-FOR-US: oretnom23 php-travel-agency-system
 CVE-2026-117512 (A vulnerability was found in oretnom23 php-travel-agency-system. This  ...)
-	TODO: check
+	NOT-FOR-US: oretnom23 php-travel-agency-system
 CVE-2026-117511 (A vulnerability has been found in desmondmorris node-tesseract up to 0 ...)
-	TODO: check
+	NOT-FOR-US: desmondmorris node-tesseract (not the same as src:tesseract)
 CVE-2026-117510 (A flaw has been found in Dexmal Dexbotic up to 0.2.0. Affected by this ...)
-	TODO: check
+	NOT-FOR-US: Dexmal Dexbotic
 CVE-2026-117509 (A vulnerability was detected in crownpku Rasa_NLU_Chi up to 0.12.2. Af ...)
-	TODO: check
+	NOT-FOR-US: crownpku Rasa_NLU_Chi
 CVE-2026-117507 (A security vulnerability has been detected in a2aproject a2a-java up t ...)
-	TODO: check
+	NOT-FOR-US: a2aproject a2a-java
 CVE-2026-117506 (A weakness has been identified in a2aproject a2a-java up to 1.2.0.Fina ...)
-	TODO: check
+	NOT-FOR-US: a2aproject a2a-java
 CVE-2026-117505 (A security flaw has been discovered in a2aproject a2a-java up to 1.2.0 ...)
-	TODO: check
+	NOT-FOR-US: a2aproject a2a-java
 CVE-2026-117504 (A vulnerability was identified in a2aproject a2a-go up to 2.4.0. The a ...)
-	TODO: check
+	NOT-FOR-US: a2aproject a2a-go
 CVE-2026-117503 (A vulnerability was determined in a2aproject a2a-go up to 2.4.0. Impac ...)
-	TODO: check
+	NOT-FOR-US: a2aproject a2a-go
 CVE-2026-117499 (@fastify/session is a session plugin for Fastify. In all releases befo ...)
-	TODO: check
+	NOT-FOR-US: fastify/session
 CVE-2026-117494 (Cross-Site Scripting (XSS) in the processing of SVG images submitted t ...)
-	TODO: check
+	NOT-FOR-US: Sisense
 CVE-2026-117493 (Stored cross-site scripting (XSS) in BloX widgets. The /api/dashboards ...)
-	TODO: check
+	NOT-FOR-US: Sisense
 CVE-2026-117466 (In affected versions of Octopus Server, a user holding the System Mana ...)
 	NOT-FOR-US: Octopus Deploy
 CVE-2026-117341 (In affected versions of Octopus Server, creating a user invitation wri ...)
@@ -2036,49 +2036,49 @@ CVE-2026-116894 (REDAXO before 5.21.5 contains an insufficient session expiratio
 CVE-2026-116893 (REDAXO core before 5.21.5 contains a missing authorization vulnerabili ...)
 	NOT-FOR-US: REDAXO
 CVE-2026-116892 (SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-s ...)
-	TODO: check
+	NOT-FOR-US: SemanticMediaWiki
 CVE-2026-116891 (SemanticMediaWiki from 4.2.0 before 7.2.1 contains a reflected cross-s ...)
-	TODO: check
+	NOT-FOR-US: SemanticMediaWiki
 CVE-2026-116890 (Semantic MediaWiki from 3.0.0 before 7.3.0 contains a missing authoriz ...)
-	TODO: check
+	NOT-FOR-US: SemanticMediaWiki
 CVE-2026-116889 (SemanticMediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site ...)
-	TODO: check
+	NOT-FOR-US: SemanticMediaWiki
 CVE-2026-116888 (SemanticMediaWiki from 3.2.0 before 7.3.1 contains a stored cross-site ...)
-	TODO: check
+	NOT-FOR-US: SemanticMediaWiki
 CVE-2026-116887 (Semantic MediaWiki from 3.0.0 before 7.3.1 contains a stored cross-sit ...)
-	TODO: check
+	NOT-FOR-US: SemanticMediaWiki
 CVE-2026-116886 (Semantic MediaWiki from 2.5.0 before 7.3.1 contains a stored cross-sit ...)
-	TODO: check
+	NOT-FOR-US: SemanticMediaWiki
 CVE-2026-116885 (Semantic MediaWiki from 3.1.0 before 7.3.1 contains a reflected cross- ...)
-	TODO: check
+	NOT-FOR-US: SemanticMediaWiki
 CVE-2026-116884 (SemanticMediaWiki from 5.0.0 before 7.3.1 contains a stored cross-site ...)
-	TODO: check
+	NOT-FOR-US: SemanticMediaWiki
 CVE-2026-116883 (Semantic MediaWiki from 3.1.0 before 7.3.1 contains a stored cross-sit ...)
-	TODO: check
+	NOT-FOR-US: SemanticMediaWiki
 CVE-2026-116882 (Semantic MediaWiki from 4.2.0 before 7.3.1 contains a stored cross-sit ...)
-	TODO: check
+	NOT-FOR-US: SemanticMediaWiki
 CVE-2026-116881 (Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site scrip ...)
-	TODO: check
+	NOT-FOR-US: SemanticMediaWiki
 CVE-2026-116880 (Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site reque ...)
-	TODO: check
+	NOT-FOR-US: SemanticMediaWiki
 CVE-2026-116879 (Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authoriz ...)
-	TODO: check
+	NOT-FOR-US: SemanticMediaWiki
 CVE-2026-116878 (Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled re ...)
-	TODO: check
+	NOT-FOR-US: SemanticMediaWiki
 CVE-2026-116877 (Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled re ...)
-	TODO: check
+	NOT-FOR-US: SemanticMediaWiki
 CVE-2026-116876 (Semantic MediaWiki from 2.5.0 before 7.3.1 contains an improper author ...)
-	TODO: check
+	NOT-FOR-US: SemanticMediaWiki
 CVE-2026-116875 (SemanticMediaWiki from 3.0.0 before 7.3.1 contains a reflected cross-s ...)
-	TODO: check
+	NOT-FOR-US: SemanticMediaWiki
 CVE-2026-116874 (SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-s ...)
-	TODO: check
+	NOT-FOR-US: SemanticMediaWiki
 CVE-2026-116873 (Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authoriz ...)
-	TODO: check
+	NOT-FOR-US: SemanticMediaWiki
 CVE-2026-116872 (Semantic MediaWiki from 3.0.0 before 7.3.1 contains an algorithmic com ...)
-	TODO: check
+	NOT-FOR-US: SemanticMediaWiki
 CVE-2026-116871 (Semantic MediaWiki 3.0.0 before 7.3.1 contains an uncontrolled recursi ...)
-	TODO: check
+	NOT-FOR-US: SemanticMediaWiki
 CVE-2026-116870 (In affected versions of Octopus Server, OIDC token issuer validation w ...)
 	NOT-FOR-US: Octopus Deploy
 CVE-2026-116863 (Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Software  ...)
@@ -2753,9 +2753,9 @@ CVE-2026-116723 (FLTK through 1.4.5 contains a stack-based buffer overflow vulne
 CVE-2026-116671 (Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of ...)
 	TODO: check
 CVE-2026-116640 (A flaw has been found in Saruf-Ratul HR-Payroll-Management-System e7cd ...)
-	TODO: check
+	NOT-FOR-US: Saruf-Ratul HR-Payroll-Management-System
 CVE-2026-116639 (A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Manage ...)
-	TODO: check
+	NOT-FOR-US: MD-MAFUJUL-HASAN Online-Payroll-Management-System
 CVE-2026-116623 (A vulnerability was detected in code-projects Simple Content Managemen ...)
 	NOT-FOR-US: code-projects
 CVE-2026-116620 (A security vulnerability has been detected in Tencent RapidJSON up to  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ef303fe5c9b9aa83d2fe64993ac9e28d289b9c5d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ef303fe5c9b9aa83d2fe64993ac9e28d289b9c5d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261028/ae4d8d81/attachment-0001.htm>

More information about the debian-security-tracker-commits mailing list