[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Sep 11 09:38:57 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a8786bc6 by Salvatore Bonaccorso at 2026-09-11T10:38:31+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -79,7 +79,7 @@ CVE-2026-84941 (An information disclosure vulnerability in the SAML Single Sign-
 CVE-2026-84889 (IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticat ...)
 	NOT-FOR-US: IBM
 CVE-2026-84432 (Concrete CMS 9 through  9.5.2 did not validate an anti-CSRF token in t ...)
-	TODO: check
+	NOT-FOR-US: Concrete CMS
 CVE-2026-83546 (The CoolClock WordPress plugin before 4.3.8 does not properly escape a ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-83545 (The CoolClock WordPress plugin before 4.3.8 does not properly escape a ...)
@@ -105,9 +105,9 @@ CVE-2026-81941 (IBM Langflow OSS 1.0.0 through 1.11.5 allows an authenticated no
 CVE-2026-81940 (IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticat ...)
 	NOT-FOR-US: IBM
 CVE-2026-81906 (Concrete CMS OAuth callback login path prior to version 9.5.3 did not  ...)
-	TODO: check
+	NOT-FOR-US: Concrete CMS
 CVE-2026-81905 (Concrete CMS below 9.5.3 stores user validation hashes for multiple pu ...)
-	TODO: check
+	NOT-FOR-US: Concrete CMS
 CVE-2026-81825 (The Simple Ajax Chat \u2013 Add a Fast, Secure Chat Box plugin for Wor ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-81754 (The Vigilant \u2013 100% Free Security Suite: Firewall, 2FA, Login, He ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a8786bc60c33e0452a191a14be98941e15fb765a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a8786bc60c33e0452a191a14be98941e15fb765a
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260911/edb0598b/attachment.htm>


More information about the debian-security-tracker-commits mailing list