[Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Thu Sep 10 08:28:20 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
94db0769 by Salvatore Bonaccorso at 2026-09-10T09:27:49+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,39 +1,39 @@
CVE-2026-88069 (Pandora contains a path traversal vulnerability in its archive extract ...)
- TODO: check
+ NOT-FOR-US: Pandora
CVE-2026-88002 (Open WebUI is an extensible, feature-rich, and user-friendly self-host ...)
- TODO: check
+ NOT-FOR-US: Open WebUI
CVE-2026-88001 (Open WebUI is an extensible, feature-rich, and user-friendly self-host ...)
- TODO: check
+ NOT-FOR-US: Open WebUI
CVE-2026-88000 (Open WebUI is an extensible, feature-rich, and user-friendly self-host ...)
- TODO: check
+ NOT-FOR-US: Open WebUI
CVE-2026-87999 (Open WebUI is an extensible, feature-rich, and user-friendly self-host ...)
- TODO: check
+ NOT-FOR-US: Open WebUI
CVE-2026-87998 (Open WebUI is an extensible, feature-rich, and user-friendly self-host ...)
- TODO: check
+ NOT-FOR-US: Open WebUI
CVE-2026-87997 (Open WebUI is an extensible, feature-rich, and user-friendly self-host ...)
- TODO: check
+ NOT-FOR-US: Open WebUI
CVE-2026-87996 (Open WebUI is an extensible, feature-rich, and user-friendly self-host ...)
- TODO: check
+ NOT-FOR-US: Open WebUI
CVE-2026-87995 (Open WebUI is an extensible, feature-rich, and user-friendly self-host ...)
- TODO: check
+ NOT-FOR-US: Open WebUI
CVE-2026-87994 (Open WebUI is an extensible, feature-rich, and user-friendly self-host ...)
- TODO: check
+ NOT-FOR-US: Open WebUI
CVE-2026-87933 (A vulnerability was found in DaveGamble cJSON up to 1.7.19. The affect ...)
TODO: check
CVE-2026-87931 (A vulnerability has been found in Behavioral Technology Group Pavlok B ...)
- TODO: check
+ NOT-FOR-US: Behavioral Technology Group Pavlok Behavioral Conditioning Wearable
CVE-2026-87926 (A flaw has been found in Rizwan17 inventory-management-system up to bf ...)
- TODO: check
+ NOT-FOR-US: Rizwan17 inventory-management-system
CVE-2026-87925 (A vulnerability was detected in Rizwan17 inventory-management-system u ...)
- TODO: check
+ NOT-FOR-US: Rizwan17 inventory-management-system
CVE-2026-87924 (A security vulnerability has been detected in Rizwan17 inventory-manag ...)
- TODO: check
+ NOT-FOR-US: Rizwan17 inventory-management-system
CVE-2026-87923 (A weakness has been identified in Rizwan17 inventory-management-system ...)
- TODO: check
+ NOT-FOR-US: Rizwan17 inventory-management-system
CVE-2026-87922 (A security flaw has been discovered in Rizwan17 inventory-management-s ...)
- TODO: check
+ NOT-FOR-US: Rizwan17 inventory-management-system
CVE-2026-87921 (A vulnerability was identified in Rizwan17 inventory-management-system ...)
- TODO: check
+ NOT-FOR-US: Rizwan17 inventory-management-system
CVE-2026-87911 (An OS command injection weakness in the read-only enforcement of the S ...)
NOT-FOR-US: Amazon
CVE-2026-87870 (The Ninja Forms - Scheduled Exports plugin for WordPress is vulnerable ...)
@@ -41,19 +41,19 @@ CVE-2026-87870 (The Ninja Forms - Scheduled Exports plugin for WordPress is vuln
CVE-2026-87804
REJECTED
CVE-2026-87017 (Open WebUI is an extensible, feature-rich, and user-friendly self-host ...)
- TODO: check
+ NOT-FOR-US: Open WebUI
CVE-2026-87016 (Open WebUI is an extensible, feature-rich, and user-friendly self-host ...)
- TODO: check
+ NOT-FOR-US: Open WebUI
CVE-2026-87015 (Open WebUI is an extensible, feature-rich, and user-friendly self-host ...)
- TODO: check
+ NOT-FOR-US: Open WebUI
CVE-2026-87014 (Open WebUI is an extensible, feature-rich, and user-friendly self-host ...)
- TODO: check
+ NOT-FOR-US: Open WebUI
CVE-2026-87013 (Open WebUI is an extensible, feature-rich, and user-friendly self-host ...)
- TODO: check
+ NOT-FOR-US: Open WebUI
CVE-2026-87012 (Open WebUI is an extensible, feature-rich, and user-friendly self-host ...)
- TODO: check
+ NOT-FOR-US: Open WebUI
CVE-2026-87011 (Open WebUI is an extensible, feature-rich, and user-friendly self-host ...)
- TODO: check
+ NOT-FOR-US: Open WebUI
CVE-2026-85645 (The Form Maker by 10Web \u2013 Mobile-Friendly Drag & Drop Contact For ...)
NOT-FOR-US: WordPress plugin
CVE-2026-84939 (Path traversal vulnerability in Apache FreeMarker template loading mec ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/94db0769a398c722e653b116a731f6d1c1d9ef3b
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/94db0769a398c722e653b116a731f6d1c1d9ef3b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260910/9cfd7463/attachment.htm>
More information about the debian-security-tracker-commits
mailing list