[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Fri Oct 30 07:15:01 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
8090993b by security tracker role at 2026-10-30T07:14:55+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,17 +1,17 @@
CVE-2026-97645 (The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96389 (Missing Authorization vulnerability in Drupal Xray Audit allows Forcef ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-92744 (Under certain conditions, privilege manager agent allows a remote unau ...)
- TODO: check
+ NOT-FOR-US: Delinea
CVE-2026-92092 (A flaw was found in openshift-ansible. The installer container's `run` ...)
- TODO: check
+ NOT-FOR-US: Red Hat software not packaged in Debian
CVE-2026-91920 (A flaw was found in the ChunkReader component of the Undertow web serv ...)
TODO: check
CVE-2026-90437 (The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-89435 (The Formidable Forms \u2013 WordPress Form Builder for Contact Forms, ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-76031 (Use after free in Input in Google Chrome prior to 156.0.8078.79 allowe ...)
TODO: check
CVE-2026-76030 (Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.7 ...)
@@ -29,27 +29,27 @@ CVE-2026-76025 (Use after free in FileSystem in Google Chrome prior to 156.0.807
CVE-2026-76024 (Memory corruption in MediaStream in Google Chrome prior to 156.0.8078. ...)
TODO: check
CVE-2026-74915 (A web page that contains unusual WebGPU content loaded into the GPU GL ...)
- TODO: check
+ NOT-FOR-US: Imagination Technologies
CVE-2026-74912 (On GPU systems with the security vulnerability fix for CVE-2026-49746 ...)
- TODO: check
+ NOT-FOR-US: Imagination Technologies
CVE-2026-67205
REJECTED
CVE-2026-67203
REJECTED
CVE-2026-65587 (A web page that contains unusual WebGPU content loaded into the GPU GL ...)
- TODO: check
+ NOT-FOR-US: Imagination Technologies
CVE-2026-65586 (Software installed and run as a non-privileged user may conduct improp ...)
- TODO: check
+ NOT-FOR-US: Imagination Technologies
CVE-2026-65584 (Software installed and run as a non-privileged user may conduct improp ...)
- TODO: check
+ NOT-FOR-US: Imagination Technologies
CVE-2026-61719 (WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a ...)
- TODO: check
+ NOT-FOR-US: WeGIA
CVE-2026-61707 (SOCFortress CoPilot focuses on providing a single pane of glass for al ...)
TODO: check
CVE-2026-61673 (WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a ...)
- TODO: check
+ NOT-FOR-US: WeGIA
CVE-2026-61671 (WeGIA is a web manager for charitable institutions. Prior to the advis ...)
- TODO: check
+ NOT-FOR-US: WeGIA
CVE-2026-61654 (Lightdash is an open source business intelligence platform. In affecte ...)
TODO: check
CVE-2026-61645 (Docat is a tool for hosting versioned static documentation. In the aff ...)
@@ -57,7 +57,7 @@ CVE-2026-61645 (Docat is a tool for hosting versioned static documentation. In t
CVE-2026-61576 (Lightdash is an open source business intelligence platform. In affecte ...)
TODO: check
CVE-2026-5461 (The Forminator Forms plugin for WordPress is vulnerable to Limited Fil ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-51832 (An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below ...)
TODO: check
CVE-2026-51831 (An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below ...)
@@ -65,11 +65,11 @@ CVE-2026-51831 (An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and
CVE-2026-45049 (Open Access Management (OpenAM) is an access management solution. Prio ...)
TODO: check
CVE-2026-19199 (Software installed and run as a non-privileged user may conduct improp ...)
- TODO: check
+ NOT-FOR-US: Imagination Technologies
CVE-2026-18629 (A web page that contains unusual GPU shader code is loaded into the GP ...)
- TODO: check
+ NOT-FOR-US: Imagination Technologies
CVE-2026-15466 (Software installed and run as a non-privileged user may conduct improp ...)
- TODO: check
+ NOT-FOR-US: Imagination Technologies
CVE-2026-13303 (HashiCorp Boundary and Boundary Enterprise are vulnerable to a server- ...)
TODO: check
CVE-2026-119325 (Bricks Theme 2.4 and before for WordPress contains an unauthenticated ...)
@@ -173,9 +173,9 @@ CVE-2026-119187 (Forge (also called node-forge) is a native implementation of Tr
CVE-2026-119186 (Forge (also called node-forge) is a native implementation of Transport ...)
TODO: check
CVE-2026-119087 (The Content Egg \u2013 Affiliate Product Importer & Price Comparison p ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-119059 (The Content Egg plugin for WordPress is vulnerable to unauthorized mod ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-118959 (A flaw was found in the required action provider mechanism of Keycloak ...)
TODO: check
CVE-2026-118952 (A flaw was found in the Kroxylicious ACL authorizer. Its prefix-matchi ...)
@@ -183,269 +183,269 @@ CVE-2026-118952 (A flaw was found in the Kroxylicious ACL authorizer. Its prefix
CVE-2026-118947 (A flaw was found in the UMA resource registration endpoint of the keyc ...)
TODO: check
CVE-2026-118698 (The JoomSport \u2013 for Sports: Team & League, Football, Hockey & mor ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-118634 (The Events Made Easy plugin for WordPress is vulnerable to Stored Cros ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-118593 (A flaw was found in Red Hat Enterprise Linux 9 kernel builds. An incom ...)
TODO: check
CVE-2026-118584 (Incorrect Authorization vulnerability in Drupal Field Permissions allo ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118583 (Incorrect Authorization vulnerability in Drupal Field Permissions allo ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118582 (Authentication Bypass Using an Alternate Path or Channel vulnerability ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118576 (Improper Neutralization of Input During Web Page Generation ("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118575 (Improper Neutralization of Input During Web Page Generation ("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118574 (Incorrect Permission Assignment for Critical Resource vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118573 (Missing Authorization vulnerability in Drupal OAuth2 Token Manager all ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118572 (Authentication Bypass Using an Alternate Path or Channel vulnerability ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118571 (Use of Web Browser Cache Containing Sensitive Information vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118570 (Cross-Site Request Forgery (CSRF) vulnerability in Drupal Fasttoggle a ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118569 (Incorrect Authorization vulnerability in Drupal Fasttoggle allows Forc ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118568 (Insecure Storage of Sensitive Information vulnerability in Drupal Cont ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118567 (Incorrect Authorization vulnerability in Drupal Bulk Update User Roles ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118565 (Vulnerability in Drupal GroupEx PRO ( Daxko ) integration. This issue ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118564 (Vulnerability in Drupal PayUmoney for Drupal Commerce. This issue affe ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118563 (Vulnerability in Drupal CacheFlush. This issue affects CacheFlush vers ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118562 (Deserialization of Untrusted Data vulnerability in Drupal Single Conte ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118561 (External Control of File Name or Path vulnerability in Drupal Single C ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118560 (Improper Neutralization of Input During Web Page Generation ("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118559 (Improper Verification of Cryptographic Signature vulnerability in Drup ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118558 (Cross-Site Request Forgery (CSRF) vulnerability in Drupal Commerce Str ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118557 (Incorrect Authorization vulnerability in Drupal Commerce Shipping allo ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118556 (Incorrect Authorization vulnerability in Drupal Commerce Shipping allo ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118555 (Incorrect Authorization vulnerability in Drupal Commerce License allow ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118554 (Authentication Bypass Using an Alternate Path or Channel vulnerability ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118553 (Improper Neutralization of Input During Web Page Generation ("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118552 (Improper Neutralization of Input During Web Page Generation ("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118551 (Insecure Storage of Sensitive Information vulnerability in Drupal AI ( ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118550 (Use of Web Browser Cache Containing Sensitive Information vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118549 (Improper Neutralization of Input During Web Page Generation ("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118548 (Incorrect Authorization vulnerability in Drupal AI (Artificial Intelli ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118546 (Improper Neutralization of Input During Web Page Generation ("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118545 (Improper Neutralization of Input During Web Page Generation ("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118544 (Exposure of Sensitive Information Through Data Queries vulnerability i ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118543 (Cross-Site Request Forgery (CSRF) vulnerability in Drupal Commerce Cor ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118542 (Incorrect Authorization vulnerability in Drupal Commerce Core allows F ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118541 (Incorrect Authorization vulnerability in Drupal Commerce Core allows F ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118540 (Incorrect Authorization vulnerability in Drupal Commerce Core allows F ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118539 (Missing Authorization vulnerability in Drupal Commerce Core allows For ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118500 (The Cool FormKit Lite \u2013 Advanced Form Builder for Elementor plugi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-118475 (A flaw was found in Eye of GNOME. When parsing a specially crafted PNG ...)
TODO: check
CVE-2026-118194 (The Page and Post Restriction plugin for WordPress is vulnerable to Au ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-118165 (The Firelight Lightbox WordPress plugin before 2.3.23 does not escape ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-118101 (The BuddyForms WordPress plugin before 2.10.1 does not verify that a u ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-118100 (The BuddyForms WordPress plugin before 2.10.3 does not check that the ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-118072 (The Fraud Prevention For WooCommerce and EDD WordPress plugin before 2 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-118071 (The Joinchat WordPress plugin before 6.4.2 does not escape the messag ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-117572 (The WP Visitor Statistics (Real Time Traffic) WordPress plugin before ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-117571 (The WP Visitor Statistics (Real Time Traffic) WordPress plugin before ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-116622 (The Food Store \u2013 Online Food Delivery & Pickup plugin for WordPre ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-115277 (The User Frontend WordPress plugin before 4.3.14 does not sanitise an ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-114573 (Improperly Controlled Modification of Dynamically-Determined Object At ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114572 (Authentication Bypass Using an Alternate Path or Channel vulnerability ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114571 (Incorrect Authorization vulnerability in Drupal Rabbit Hole allows For ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114555 (Improper Neutralization of Input During Web Page Generation ("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114554 (Incorrect Authorization vulnerability in Drupal AI File to Text allows ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114553 (Incorrect Authorization vulnerability in Drupal Frontend Editing allow ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114548 (Use of Web Browser Cache Containing Sensitive Information vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114547 (Missing Authorization vulnerability in Drupal TinyPNG allows Forceful ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114546 (Use of Web Browser Cache Containing Sensitive Information vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114545 (Incorrect Authorization vulnerability in Drupal Fullcalendar View allo ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114544 (Incorrect Authorization vulnerability in Drupal Media Bulk Upload allo ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114543 (Incorrect Authorization vulnerability in Drupal Simple User Management ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114542 (Use of Web Browser Cache Containing Sensitive Information vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114541 (Cross-Site Request Forgery (CSRF) vulnerability in Drupal Frontend Edi ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114540 (Incorrect Authorization vulnerability in Drupal Domain allows Forceful ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114539 (Authentication Bypass Using an Alternate Path or Channel vulnerability ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114538 (Improper Neutralization of Input During Web Page Generation ("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114537 (Incorrect Authorization vulnerability in Drupal View Unpublished allow ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114536 (Improper Neutralization of Input During Web Page Generation ("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114535 (Missing Authorization vulnerability in Drupal Swiper formatter allows ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114534 (Improper Neutralization of Input During Web Page Generation ("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114533 (Missing Authorization vulnerability in Drupal \xc1gora Transparency Th ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114532 (Improper Neutralization of Input During Web Page Generation ("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114531 (Improper Neutralization of Input During Web Page Generation ("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114530 (Incorrect Authorization vulnerability in Drupal Dopup allows Forceful ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114529 (Improper Neutralization of Input During Web Page Generation ("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114528 (Improper Neutralization of Input During Web Page Generation ("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114527 (Improper Neutralization of Input During Web Page Generation ("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114526 (Improper Neutralization of Input During Web Page Generation ("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114525 (Improper Neutralization of Input During Web Page Generation ("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114524 (Privilege Defined With Unsafe Actions vulnerability in Drupal Custom F ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114523 (Improper Neutralization of Special Elements used in an OS Command ("OS ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114444 (The Security Plugin, Firewall & Malware Scanner with Auto Removal Word ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-114443 (The Security Plugin, Firewall & Malware Scanner with Auto Removal Word ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-114422 (The Enable Media Replace WordPress plugin before 4.2.3 does not restri ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-112922 (A flaw was found in Ghostscript. A remote attacker could exploit this ...)
TODO: check
CVE-2026-112605 (This issue was addressed with improved handling of symlinks. This issu ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2026-112602 (An authorization issue was addressed with improved state management. T ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2026-112211
REJECTED
CVE-2026-110738 (Improper Neutralization of Input During Web Page Generation ("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-110732 (The AI Engine \u2013 The Chatbot, AI Framework & MCP for WordPress plu ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110133 (A flaw was found in Ghostscript. When processing a specially crafted T ...)
TODO: check
CVE-2026-108515 (Improper Neutralization of Input During Web Page Generation ("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-108514 (Improper Neutralization of Input During Web Page Generation ("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-108099 (Use of Externally-Controlled Input to Select Classes or Code ('Unsafe ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-108097 (Use of Externally-Controlled Input to Select Classes or Code ('Unsafe ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107312 (Allocation of Resources Without Limits or Throttling vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107311 (Improper Check for Unusual or Exceptional Conditions vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107310 (Server-Side Request Forgery (SSRF) vulnerability in Drupal Freelinking ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107309 (Missing Authorization vulnerability in Drupal Easy Breadcrumb allows F ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107308 (Improper Neutralization of Input During Web Page Generation ("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107307 (Incorrect Authorization vulnerability in Drupal SmartLinker AI allows ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107306 (Improper Neutralization of Input During Web Page Generation ("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107268 (Insertion of Sensitive Information Into Sent Data vulnerability in Dru ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107267 (Missing Authorization vulnerability in Drupal DKAN allows Forceful Bro ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107266 (Missing Authorization vulnerability in Drupal Views Share allows Force ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107265 (Improper Neutralization of Input During Web Page Generation ("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107264 (Improper Neutralization of Special Elements Used in a Template Engine ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107263 (Incorrect Authorization vulnerability in Drupal Gutenberg allows Force ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107262 (Cross-Site Request Forgery (CSRF) vulnerability in Drupal Advanced Fil ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107261 (Authentication Bypass Using an Alternate Path or Channel vulnerability ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107260 (Improper Neutralization of Input During Web Page Generation ("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107259 (Improper Neutralization of Special Elements Used in a Template Engine ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107258 (Incorrect Authorization vulnerability in Drupal Inline Entity Form Dia ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107257 (Incorrect Authorization vulnerability in Drupal Actstream allows Force ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107256 (Improper Restriction of Excessive Authentication Attempts vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107255 (Incorrect Authorization vulnerability in Drupal Restrict route by IP a ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107254 (Authentication Bypass Using an Alternate Path or Channel vulnerability ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107253 (Vulnerability in Drupal Orphans Media. This issue affects Orphans Medi ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107252 (Improper Neutralization of Input During Web Page Generation ("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107251 (Incorrect Authorization vulnerability in Drupal Entity Reference Manag ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107250 (Vulnerability in Drupal ECA Helper. This issue affects ECA Helper vers ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107249 (Improperly Controlled Modification of Dynamically-Determined Object At ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107239 (A vulnerability allowing a member of the Veeam Virtualization Extensio ...)
TODO: check
CVE-2026-107238 (A vulnerability allowing an authenticated domain user to perform remot ...)
TODO: check
CVE-2026-104368 (The Export and Import Users and Customers plugin for WordPress is vuln ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103963 (A flaw was found in glib-networking. When establishing connections usi ...)
TODO: check
CVE-2026-103039 (The Gravity Forms plugin for WordPress is vulnerable to PHP Object Inj ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-115943 (Spreadsheet::XLSX versions before 0.19 for Perl allow code execution v ...)
- libspreadsheet-xlsx-perl <unfixed> (bug #1152516)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44746764/
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8090993bf5bda325f963603f7de73e1fc28585bd
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8090993bf5bda325f963603f7de73e1fc28585bd
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261030/54c18b69/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list