[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sat Oct 31 08:42:10 GMT 2026 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
99247e48 by Salvatore Bonaccorso at 2026-10-31T09:33:01+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -33,75 +33,75 @@ CVE-2026-88942 (The Product Filter for WooCommerce by WBW plugin for WordPress i
 CVE-2026-82214 (The Quick Event Manager WordPress plugin before 9.19 does not verify t ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-7005 (WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-o ...)
-	TODO: check
+	NOT-FOR-US: WIT SynApps Runtime
 CVE-2026-78403 (Stack-based buffer overflow and missing authorization vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: Thales Sentinel Keys Server on Windows
 CVE-2026-78402 (Stack-based buffer overflow and out-of-bounds write vulnerability in T ...)
-	TODO: check
+	NOT-FOR-US: Thales Sentinel Keys Server on Windows
 CVE-2026-77152 (Improper Authorization vulnerability in Drupal Field Collection for Dr ...)
 	NOT-FOR-US: Drupal core and addons
 CVE-2026-63414 (Shopify App is a Rails engine for building Shopify applications. From  ...)
-	TODO: check
+	NOT-FOR-US: Shopify App
 CVE-2026-63410 (secp256k1-native is a native C secp256k1 implementation for Ruby. In a ...)
-	TODO: check
+	NOT-FOR-US: secp256k1-native Ruby gem
 CVE-2026-63402 (i18next is an internationalization framework for JavaScript. Prior to  ...)
 	- node-i18next <unfixed>
 	NOTE: https://github.com/i18next/i18next/security/advisories/GHSA-6jcc-5g8w-32mx
 	NOTE: Fixed by: https://github.com/i18next/i18next/commit/642137b7786d83661ec3ee53027798dc4b81d30a (v26.3.4)
 CVE-2026-63401 (Coop is an open source review and moderation tool from ROOST. Prior to ...)
-	TODO: check
+	NOT-FOR-US: Coop
 CVE-2026-63400 (Coop is an open source review and moderation tool from ROOST. Prior to ...)
-	TODO: check
+	NOT-FOR-US: Coop
 CVE-2026-63399 (Coop is an open source review and moderation tool from ROOST. Prior to ...)
-	TODO: check
+	NOT-FOR-US: Coop
 CVE-2026-63398 (Coop is an open source review and moderation tool from ROOST. Prior to ...)
-	TODO: check
+	NOT-FOR-US: Coop
 CVE-2026-63396 (Coop is an open source review and moderation tool from ROOST. Prior to ...)
-	TODO: check
+	NOT-FOR-US: Coop
 CVE-2026-63393 (OpenSearch SQL supports querying OpenSearch data using SQL and Piped P ...)
-	TODO: check
+	NOT-FOR-US: OpenSearch SQL
 CVE-2026-63378 (TAKO AI Agent for Okta is a local-first AI agent that helps Okta admin ...)
-	TODO: check
+	NOT-FOR-US: AKO AI Agent
 CVE-2026-63377 (TAKO AI Agent for Okta is a local-first AI agent that helps Okta admin ...)
-	TODO: check
+	NOT-FOR-US: AKO AI Agent
 CVE-2026-63346 (Refitter is a tool for generating a C# REST API client using the Refit ...)
-	TODO: check
+	NOT-FOR-US: Refitter
 CVE-2026-63345 (Refitter is a tool for generating a C# REST API client using the Refit ...)
-	TODO: check
+	NOT-FOR-US: Refitter
 CVE-2026-63344 (Refitter is a tool for generating a C# REST API client using the Refit ...)
-	TODO: check
+	NOT-FOR-US: Refitter
 CVE-2026-63341 (Aedes is an MQTT broker that can run on any stream server. Prior to 1. ...)
-	TODO: check
+	NOT-FOR-US: Aedes
 CVE-2026-63339 (IXP Manager is a full-stack web application for managing Internet Exch ...)
-	TODO: check
+	NOT-FOR-US: IXP Manager
 CVE-2026-63338 (IXP Manager is a full-stack web application for managing Internet Exch ...)
-	TODO: check
+	NOT-FOR-US: IXP Manager
 CVE-2026-63224 (OpenRemote is an open-source internet-of-things platform. Prior to 1.2 ...)
-	TODO: check
+	NOT-FOR-US: OpenRemote
 CVE-2026-63201 (Netopeer2 is a server for implementing network configuration managemen ...)
-	TODO: check
+	NOT-FOR-US: Netopeer2
 CVE-2026-63184 (Refitter is a tool for generating a C# REST API client using the Refit ...)
-	TODO: check
+	NOT-FOR-US: Refitter
 CVE-2026-63182 (LightSAML implements SAML 2.0 data model classes, XML serialization an ...)
-	TODO: check
+	NOT-FOR-US: LightSAML
 CVE-2026-63121 (Kubewarden policies is a collection of WebAssembly policies for securi ...)
-	TODO: check
+	NOT-FOR-US: Kubewarden policies
 CVE-2026-63115 (ActivityPub is a multi-tenant ActivityPub server for Ghost, built with ...)
-	TODO: check
+	NOT-FOR-US: ActivityPub
 CVE-2026-62991 (Shopper is a Headless e-commerce Admin Panel. Prior to 2.10.1, the cus ...)
-	TODO: check
+	NOT-FOR-US: Shopper
 CVE-2026-62990 (Shopper is a Headless e-commerce Admin Panel. In versions from 2.0.0 p ...)
-	TODO: check
+	NOT-FOR-US: Shopper
 CVE-2026-62989 (Shopper is a Headless e-commerce Admin Panel. Prior to 2.10.0, the Var ...)
-	TODO: check
+	NOT-FOR-US: Shopper
 CVE-2026-62979 (jack lets users share media libraries through their Radarr/Sonarr stac ...)
 	TODO: check
 CVE-2026-62968 (Dream Displays provides in-game screens for streaming videos in Minecr ...)
-	TODO: check
+	NOT-FOR-US: Dream Displays
 CVE-2026-62967 (ZTNET is a ZeroTier web UI for private controllers with multiuser and  ...)
-	TODO: check
+	NOT-FOR-US: ZTNET
 CVE-2026-62966 (ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library ...)
-	TODO: check
+	NOT-FOR-US: ESPAsyncWebServer
 CVE-2026-62965 (SABnzbd is an open source automated Usenet download tool. Prior to 5.1 ...)
 	TODO: check
 CVE-2026-62958 (libriscv is a RISC-V sandbox and emulator. Prior to 1.18, a crafted EL ...)
@@ -408,7 +408,7 @@ CVE-2026-78527 (Contributor PHP Object Injection in GS Testimonial Slider <= 3.3
 CVE-2026-76012 (The Photo Gallery, Sliders, Proofing and Themes \u2013 NextGEN Gallery ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-75882 (An improper access control vulnerability in ESET Endpoint Encryption a ...)
-	TODO: check
+	NOT-FOR-US: ESET
 CVE-2026-73322 (Incorrect Authorization vulnerability in the single-stage query engine ...)
 	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-73186 (Subscriber PHP Object Injection in Enable Media Replace <= 4.2.2 versi ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/99247e4801effbbb82f1f2702e612ba11d9eec78

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/99247e4801effbbb82f1f2702e612ba11d9eec78
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261031/6f917f7f/attachment-0001.htm>

More information about the debian-security-tracker-commits mailing list