[Git][security-tracker-team/security-tracker][master] Add new nomad issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
970a1928 by Salvatore Bonaccorso at 2026-10-29T21:34:57+01:00
Add new nomad issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -323,7 +323,7 @@ CVE-2026-119250 (A malicious actor with local access and low privileges could ex
 CVE-2026-119249 (A malicious actor with access to the network could exploit a Binding t ...)
 	NOT-FOR-US: Ubiquity
 CVE-2026-119168 (HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink followi ...)
-	TODO: check
+	- nomad <removed>
 CVE-2026-119145 (Frappe before 15.121.0 and 16.x before 16.34.0 contains a path travers ...)
 	NOT-FOR-US: Frappe
 CVE-2026-119144 (Frappe Framework before 15.111.0 and 16.x before 16.21.0 contains a se ...)
@@ -693,7 +693,7 @@ CVE-2026-107629 (The Greenshift \u2013 animation and page builder blocks plugin
 CVE-2026-107627 (The Greenshift \u2013 animation and page builder blocks plugin for Wor ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-107347 (HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink followi ...)
-	TODO: check
+	- nomad <removed>
 CVE-2026-107329 (IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticat ...)
 	NOT-FOR-US: IBM
 CVE-2026-107328 (IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticat ...)
@@ -833,7 +833,7 @@ CVE-2026-103092 (IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote auth
 CVE-2026-102590 (IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticat ...)
 	NOT-FOR-US: IBM
 CVE-2026-102260 (HashiCorp Nomad and Nomad Enterprise are vulnerable to cross-namespace ...)
-	TODO: check
+	- nomad <removed>
 CVE-2026-101288 (IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticat ...)
 	NOT-FOR-US: IBM
 CVE-2025-62841 (An use of hard-coded cryptographic key vulnerability has been reported ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/970a1928472b35352c108f2c8cbc9b511e5c162e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/970a1928472b35352c108f2c8cbc9b511e5c162e
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261029/c6f0f803/attachment-0001.htm>