[Git][security-tracker-team/security-tracker][master] 2 commits: auto-nfu: Adjust regeular expression for matching PraisonAI NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0cb0a03d by Salvatore Bonaccorso at 2026-09-14T21:53:38+02:00
auto-nfu: Adjust regeular expression for matching PraisonAI NFUs

- - - - -
048a9471 by Salvatore Bonaccorso at 2026-09-14T21:54:08+02:00
Process some NFUs

- - - - -


2 changed files:

- data/CVE/list
- data/packages/nfu.yaml


Changes:

=====================================
data/CVE/list
=====================================
@@ -371,37 +371,37 @@ CVE-2026-57570 (backpack/crud provides Create, Read, Update & Delete (CRUD) func
 CVE-2026-57497 (webtransport-go is an implementation of the WebTransport protocol. Pri ...)
 	TODO: check
 CVE-2026-57145 (PraisonAI is a multi-agent teams system. Prior to 4.6.62, src/praisona ...)
-	TODO: check
+	NOT-FOR-US: PraisonAI
 CVE-2026-57132 (PraisonAI is a multi-agent teams system. Prior to 4.6.62, setting PRAI ...)
-	TODO: check
+	NOT-FOR-US: PraisonAI
 CVE-2026-57131 (PraisonAI is a multi-agent teams system. Prior to 4.6.58, praisonai.jo ...)
-	TODO: check
+	NOT-FOR-US: PraisonAI
 CVE-2026-57130 (PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6. ...)
-	TODO: check
+	NOT-FOR-US: PraisonAI
 CVE-2026-57129 (PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6. ...)
-	TODO: check
+	NOT-FOR-US: PraisonAI
 CVE-2026-57128 (PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6. ...)
-	TODO: check
+	NOT-FOR-US: PraisonAI
 CVE-2026-57127 (PraisonAI is a multi-agent teams system. Prior to 4.6.58, recipe serve ...)
-	TODO: check
+	NOT-FOR-US: PraisonAI
 CVE-2026-57126 (PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6. ...)
-	TODO: check
+	NOT-FOR-US: PraisonAI
 CVE-2026-57125 (PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.59 and ...)
-	TODO: check
+	NOT-FOR-US: PraisonAI
 CVE-2026-57124 (PraisonAI is a multi-agent teams system. Prior to 4.6.59, the default  ...)
-	TODO: check
+	NOT-FOR-US: PraisonAI
 CVE-2026-57123 (PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6. ...)
-	TODO: check
+	NOT-FOR-US: PraisonAI
 CVE-2026-57122 (PraisonAI is a multi-agent teams system. Prior to 4.6.59, the WhatsApp ...)
-	TODO: check
+	NOT-FOR-US: PraisonAI
 CVE-2026-57120 (PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6. ...)
-	TODO: check
+	NOT-FOR-US: PraisonAI
 CVE-2026-57119 (PraisonAI is a multi-agent teams system. Prior to 4.6.59, the unauthen ...)
-	TODO: check
+	NOT-FOR-US: PraisonAI
 CVE-2026-57115 (PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6. ...)
-	TODO: check
+	NOT-FOR-US: PraisonAI
 CVE-2026-56839 (PraisonAI is a multi-agent teams system. Prior to 4.6.59, the CODE_TOO ...)
-	TODO: check
+	NOT-FOR-US: PraisonAI
 CVE-2026-55866 (SpiceDB is an open source database system for creating and managing se ...)
 	TODO: check
 CVE-2026-55847 (Allure 2 is the version 2.x branch of Allure Report, a multi-language  ...)


=====================================
data/packages/nfu.yaml
=====================================
@@ -1071,7 +1071,7 @@
 - reason: Portabilis
   description: '.*\b(?i:Portabilis\s+i-)\b.*'
 - reason: PraisonAI
-  description: '.*\b(?i:PraisonAI\s+i-)\b.*'
+  description: '.*\b(?i:PraisonAI)\b.*'
 - reason: Project Worlds
   description: '.*\b(?i:(Project Worlds|projectworlds))\s.*\s(?i:(system|project))\b.*'
 - reason: Serosoft Solutions



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/ae1269ea8b47e118ddbc4a71f13ea280c6c1db01...048a94714b17f307d103119dc7ee6657231eea82

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/ae1269ea8b47e118ddbc4a71f13ea280c6c1db01...048a94714b17f307d103119dc7ee6657231eea82
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260914/adaeeff9/attachment-0001.htm>