[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0a13a5f3 by Salvatore Bonaccorso at 2026-10-31T20:52:10+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,15 +1,15 @@
 CVE-2026-96554 (The BuddyBoss Platform plugin for WordPress is vulnerable to Stored Cr ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-78192 (WebDyne versions from 2.022 before 3.022 for Perl disclose application ...)
-	TODO: check
+	NOT-FOR-US: WebDyne
 CVE-2026-78191 (WebDyne versions from 2.031 before 3.022 for Perl execute files with . ...)
-	TODO: check
+	NOT-FOR-US: WebDyne
 CVE-2026-78190 (WebDyne versions from 2.014 before 3.022 for Perl reflect request para ...)
-	TODO: check
+	NOT-FOR-US: WebDyne
 CVE-2026-78189 (WebDyne versions from 3.007 before 3.022 for Perl execute .psp files o ...)
-	TODO: check
+	NOT-FOR-US: WebDyne
 CVE-2026-78188 (WebDyne versions from 2.014 before 3.022 for Perl issue session cookie ...)
-	TODO: check
+	NOT-FOR-US: WebDyne
 CVE-2026-76010 (The Photo Gallery, Sliders, Proofing and Themes \u2013 NextGEN Gallery ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-15272 (The Web 2.0 Directory plugin for WordPress is vulnerable to time-based ...)
@@ -276,15 +276,15 @@ CVE-2026-61725 (sevenz-rust2 is a Rust-native 7z compressor and `decompress`or.
 	NOTE: https://github.com/hasenbanck/sevenz-rust2/security/advisories/GHSA-qh76-45cr-8xrc
 	NOTE: Fixed by: https://github.com/hasenbanck/sevenz-rust2/commit/ef760b61f3535ac8b93006212aef41bfebc237eb (v0.21.1)
 CVE-2026-61694 (go-xrpl is a Go implementation of the XRP Ledger protocol. In versions ...)
-	TODO: check
+	NOT-FOR-US: go-xrpl
 CVE-2026-61620 (HoneySQL turns Clojure data structures into SQL. From 2.0.0 until 2.7. ...)
-	TODO: check
+	NOT-FOR-US: HoneySQL
 CVE-2026-61618 (SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, KZG accu ...)
-	TODO: check
+	NOT-FOR-US: SNARK Verifier
 CVE-2026-59993 (Picotls is a TLS protocol library that allows users select different c ...)
 	TODO: check
 CVE-2026-58412 (Filecoin Pin is an IPFS Pinning Service API implementation that pins t ...)
-	TODO: check
+	NOT-FOR-US: Filecoin Pin
 CVE-2026-55614 (uhttpd is a small HTTP server. In unpatched repository snapshots, `cli ...)
 	NOT-FOR-US: uhttpd in OpenWrt
 CVE-2026-55613 (uhttpd is a small HTTP server. In unpatched repository snapshots, `uh_ ...)
@@ -641,19 +641,19 @@ CVE-2026-61728 (SOCFortress CoPilot focuses on providing a single pane of glass
 CVE-2026-61708 (SOCFortress CoPilot focuses on providing a single pane of glass for al ...)
 	NOT-FOR-US: SOCFortress CoPilot
 CVE-2026-61586 (Copernik XML Factory provides secure-by-default JAXP factory creation  ...)
-	TODO: check
+	NOT-FOR-US: Copernik XML Factory
 CVE-2026-59978 (AdminNeo is a full-featured database management tool written in PHP. F ...)
 	NOT-FOR-US: AdminNeo
 CVE-2026-59396 (A denial-of-service vulnerability exists in UAA's private_key_jwt clie ...)
-	TODO: check
+	NOT-FOR-US: Cloud Foundry UUA
 CVE-2026-59388 (Cloud Controller (CAPI) leaks sensitive data into audit logs in multip ...)
-	TODO: check
+	NOT-FOR-US: Cloud Foundry
 CVE-2026-59387 (The Nginx routing configuration for Cloud Controller blocks unauthenti ...)
-	TODO: check
+	NOT-FOR-US: Cloud Foundry
 CVE-2026-59386 (A SpaceSupporter could improperly modify an application's start comman ...)
-	TODO: check
+	NOT-FOR-US: Cloud Foundry
 CVE-2026-59385 (A user with SpaceDeveloper privileges could modify the URL of a space- ...)
-	TODO: check
+	NOT-FOR-US: Cloud Foundry
 CVE-2026-55551 (ZAC is an open-source, workflow-based Common Ground component for Dutc ...)
 	NOT-FOR-US: ZAC
 CVE-2026-54855 (Unauthenticated Cross Site Scripting (XSS) in Profile Builder <= 4.0.5 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0a13a5f359c3681eae51c35014d4751dc074cd19

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0a13a5f359c3681eae51c35014d4751dc074cd19
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261031/0d4db93f/attachment.htm>