[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6eaaf43f by Salvatore Bonaccorso at 2026-09-10T21:37:21+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3,11 +3,11 @@ CVE-2026-9338 (IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a
 CVE-2026-9336 (IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denia ...)
 	NOT-FOR-US: IBM
 CVE-2026-9166 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
-	TODO: check
+	NOT-FOR-US: GisLab Laboratory Management System
 CVE-2026-9163 (Improper neutralization of special elements used in an SQL command ('S ...)
-	TODO: check
+	NOT-FOR-US: GisLab Laboratory Management System
 CVE-2026-9161 (Observable response discrepancy vulnerability in DernekPlus Website Te ...)
-	TODO: check
+	NOT-FOR-US: DernekPlus
 CVE-2026-8323 (URL redirection to untrusted site ('open redirect') vulnerability in A ...)
 	TODO: check
 CVE-2026-89049 (A server-side request forgery issue due to improper validation of equi ...)
@@ -19,19 +19,19 @@ CVE-2026-89045 (zstd-jni versions 1.4.8-4 through 1.5.7-13 fail to validate nega
 CVE-2026-89044 (Netty versions 4.1.133.Final through 4.1.137.Final and 4.2.13.Final th ...)
 	TODO: check
 CVE-2026-89043 (passport-saml-encrypted through 0.1.13 contains an XML signature wrapp ...)
-	TODO: check
+	NOT-FOR-US: passport-saml-encrypted
 CVE-2026-89042 (passport-saml-encrypted through 0.1.13 makes SAML signature verificati ...)
-	TODO: check
+	NOT-FOR-US: passport-saml-encrypted
 CVE-2026-88959 (Anchor CMS through 0.12.7 fails to enforce role-based access control i ...)
-	TODO: check
+	NOT-FOR-US: Anchor CMS
 CVE-2026-88940 (knowns through 0.33.0 fails to validate the path query parameter in th ...)
-	TODO: check
+	NOT-FOR-US: knowns-dev/knowns
 CVE-2026-88939 (knowns through 0.33.0 exempts the project.set action from permission g ...)
-	TODO: check
+	NOT-FOR-US: knowns-dev/knowns
 CVE-2026-88938 (knowns through 0.33.0 fails to confine the path argument of the code.f ...)
-	TODO: check
+	NOT-FOR-US: knowns-dev/knowns
 CVE-2026-88937 (knowns through 0.33.0 fails to properly validate template destination  ...)
-	TODO: check
+	NOT-FOR-US: knowns-dev/knowns
 CVE-2026-88924 (A flaw was found in the admin backend of gvfs. The privileged gvfsd-ad ...)
 	TODO: check
 CVE-2026-88921 (MISP contains an HTML injection vulnerability in the MISPElementHTMLFo ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6eaaf43fab78c5f390fe1552012109b71d4826a8

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6eaaf43fab78c5f390fe1552012109b71d4826a8
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260910/54575f4f/attachment.htm>