[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fb8de455 by Salvatore Bonaccorso at 2026-10-29T08:41:15+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -25,11 +25,11 @@ CVE-2026-86983 (A remote attacker may be able to terminate a process that passes
 CVE-2026-86794 (The Community Events WordPress plugin before 1.6.0 does not have autho ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-85749 (MailWatch for MailScanner is a web-based front-end to MailScanner. Pri ...)
-	TODO: check
+	NOT-FOR-US: MailWatch for MailScanner
 CVE-2026-85007 (The Video Player for YouTube  WordPress plugin before 2.1.4 does not p ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-82411 (Open Object provides an API and admin interface to manage objects and  ...)
-	TODO: check
+	NOT-FOR-US: Open Object
 CVE-2026-78674 (The BPMN System REST APIs do not sufficiently validate input parameter ...)
 	NOT-FOR-US: WSO2
 CVE-2026-78396 (The Link Library WordPress plugin before 7.10.0 does not verify that a ...)
@@ -43,17 +43,17 @@ CVE-2026-75520 (Domoticz is a free, open source home automation system for Linux
 CVE-2026-6647 (In deployments of WSO2 Identity Server configured with a case-insensit ...)
 	NOT-FOR-US: WSO2
 CVE-2026-66092 (In openEQUELLA before 2026.2, the pre-login notice is stored as HTML a ...)
-	TODO: check
+	NOT-FOR-US: openEQUELLA
 CVE-2026-66091 (In openEQUELLA before 2026.1, the GET /api/userquery/userinfobackup en ...)
-	TODO: check
+	NOT-FOR-US: openEQUELLA
 CVE-2026-66090 (In openEQUELLA before 2026.1, the XML parser used for item metadata do ...)
-	TODO: check
+	NOT-FOR-US: openEQUELLA
 CVE-2026-66089 (In openEQUELLA before 2026.1, the SOAP API parses XML supplied in the  ...)
-	TODO: check
+	NOT-FOR-US: openEQUELLA
 CVE-2026-66088 (In openEQUELLA before 2026.1, the system.execute() function available  ...)
-	TODO: check
+	NOT-FOR-US: openEQUELLA
 CVE-2026-63190 (FearlessCMS is a flat-file `content` management system centered on sim ...)
-	TODO: check
+	NOT-FOR-US: FearlessCMS
 CVE-2026-61575 (AVideo is a video-sharing Platform. Prior to 8.1.0, `view/queue.php` u ...)
 	NOT-FOR-US: WWBN AVideo
 CVE-2026-61573 (AVideo is a video-sharing Platform. Prior to 8.1.0, the anonymous logi ...)
@@ -69,13 +69,13 @@ CVE-2026-61567 (AVideo is a video-sharing Platform. Prior to 8.1.0, the live-str
 CVE-2026-61564 (AVideo is a video-sharing Platform. Prior to 8.1.0, the unauthenticate ...)
 	NOT-FOR-US: WWBN AVideo
 CVE-2026-61546 (AnkiMCP is an Anki addon that implements an MCP server, enabling AI as ...)
-	TODO: check
+	NOT-FOR-US: AnkiMCP
 CVE-2026-61542 (Gearboy is a Game Boy, Game Boy Color, and Super Game Boy emulator and ...)
-	TODO: check
+	NOT-FOR-US: Gearboy
 CVE-2026-61529 (Endatix is a self-hosted form and survey management platform with a he ...)
-	TODO: check
+	NOT-FOR-US: Endatix
 CVE-2026-57448 (Blombooru is a self-hosted personal booru for organizing and tagging p ...)
-	TODO: check
+	NOT-FOR-US: Blombooru
 CVE-2026-55561 (InvoicePlane is a self-hosted open source application for managing inv ...)
 	TODO: check
 CVE-2026-54455 (OpenCATS is an open-source applicant tracking system and recruitment C ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fb8de45507fb5d622a3d62eef0a88f59ffa31146

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fb8de45507fb5d622a3d62eef0a88f59ffa31146
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261029/96dd3ece/attachment.htm>