[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5c35cfe9 by Salvatore Bonaccorso at 2026-10-29T10:56:07+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -94,31 +94,31 @@ CVE-2026-61529 (Endatix is a self-hosted form and survey management platform wit
 CVE-2026-57448 (Blombooru is a self-hosted personal booru for organizing and tagging p ...)
 	NOT-FOR-US: Blombooru
 CVE-2026-55561 (InvoicePlane is a self-hosted open source application for managing inv ...)
-	TODO: check
+	NOT-FOR-US: InvoicePlane
 CVE-2026-54455 (OpenCATS is an open-source applicant tracking system and recruitment C ...)
-	TODO: check
+	NOT-FOR-US: OpenCATS
 CVE-2026-54453 (OpenCATS is an open-source applicant tracking system and recruitment C ...)
-	TODO: check
+	NOT-FOR-US: OpenCATS
 CVE-2026-54162 (Ember is a real-time terminal dashboard for Caddy servers with Franken ...)
 	TODO: check
 CVE-2026-42949 (A authorization bypass vulnerability exists in the /api/runscript func ...)
-	TODO: check
+	NOT-FOR-US: FUXA
 CVE-2026-42922 (A authorization bypass vulnerability exists in the /nodered functional ...)
-	TODO: check
+	NOT-FOR-US: FUXA
 CVE-2026-40063 (A information disclosure vulnerability exists in the /nodered/fuxa/scr ...)
-	TODO: check
+	NOT-FOR-US: FUXA
 CVE-2026-3583 (When the `allowed_scopes` configuration is enabled, the OAuth2 token i ...)
 	NOT-FOR-US: WSO2
 CVE-2026-21157 (Improper input validation in Bixby prior to version 4.0.85.6 allows pr ...)
 	NOT-FOR-US: Samsung Mobile
 CVE-2026-19610 (A flaw was found in the platform-mbean component of JBoss EAP, which p ...)
-	TODO: check
+	NOT-FOR-US: Red Hat JBoss EAP
 CVE-2026-16889 (In openEQUELLA before 2026.1, the pre-login notice image upload endpoi ...)
-	TODO: check
+	NOT-FOR-US: openEQUELLA
 CVE-2026-15564 (Wildfly's IIOP listener may permit deserialization of input streams be ...)
 	TODO: check
 CVE-2026-13451 (A flaw was found in KServe. A namespace-scoped user with create/update ...)
-	TODO: check
+	NOT-FOR-US: KServe
 CVE-2026-11854 (The authentication endpoint generates an error message that includes r ...)
 	NOT-FOR-US: WSO2
 CVE-2026-118905 (Node Version Manager (nvm) is a POSIX-compliant shell function for man ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5c35cfe938b7ceede3c2e1b01b9f55610ed6a800

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5c35cfe938b7ceede3c2e1b01b9f55610ed6a800
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261029/398caf8d/attachment-0001.htm>