[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5885fa78 by Salvatore Bonaccorso at 2026-09-10T12:44:44+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -61,17 +61,17 @@ CVE-2026-85645 (The Form Maker by 10Web \u2013 Mobile-Friendly Drag & Drop Conta
 CVE-2026-84939 (Path traversal vulnerability in Apache FreeMarker template loading mec ...)
 	TODO: check
 CVE-2026-84063 (BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted u ...)
-	TODO: check
+	NOT-FOR-US: BurgerEditor
 CVE-2026-84062 (BurgerEditor 3.0.0 through 3.4.0 contains an issue with authorization  ...)
-	TODO: check
+	NOT-FOR-US: BurgerEditor
 CVE-2026-82925 (The Site Reviews WordPress plugin before 8.3.0 does not prevent reques ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-82582 (An authorization bypass vulnerability exists in SHIRASAGI through a us ...)
-	TODO: check
+	NOT-FOR-US: SHIRASAGI
 CVE-2026-82079 (A stack-based buffer overflow vulnerability in the Nintendo Switch loc ...)
-	TODO: check
+	NOT-FOR-US: Nintendo
 CVE-2026-81635 (A cross-site scripting vulnerability exists in SHIRASAGI, which may al ...)
-	TODO: check
+	NOT-FOR-US: SHIRASAGI
 CVE-2026-81431 (The Registration Form for WooCommerce WordPress plugin before 1.1.3 do ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-79522 (An out-of-bounds read in the gf_dm_get_chunk_data function (src/utils/ ...)
@@ -85,9 +85,9 @@ CVE-2026-79514 (An out-of-bounds read in the gf_dm_data_received function (downl
 CVE-2026-79513 (A divide-by-zero vulnerability in the gf_dash_get_timeline_duration fu ...)
 	TODO: check
 CVE-2026-79387 (SQL injection vulnerability in PbootCMS versions 3.2.0 through 3.2.5 a ...)
-	TODO: check
+	NOT-FOR-US: PbootCMS
 CVE-2026-79324 (Missing authorization in the Address Delete controller in Mageplaza GD ...)
-	TODO: check
+	NOT-FOR-US: Mageplaza GDPR for Magento 2 (mageplaza/module-gdpr)
 CVE-2026-78361 (The zipMoney(Zip Co) Payments Plugin for WooCommerce WordPress plugin  ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-77771 (The miniOrange 2FA  WordPress plugin before 6.3.1, miniOrange 2FA  Wor ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5885fa78b201f553bf7e2b790f524cfd15cfe716

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5885fa78b201f553bf7e2b790f524cfd15cfe716
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260910/3596cfac/attachment.htm>