[Git][security-tracker-team/security-tracker][master] Process some more NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
dfe1d281 by Salvatore Bonaccorso at 2026-09-17T10:38:47+02:00
Process some more NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -18,7 +18,7 @@ CVE-2026-92813 (Metabase through 0.63.18 fails to properly validate the unspecif
 CVE-2026-92812 (decap-server contains a path traversal vulnerability in the local prox ...)
 	NOT-FOR-US: decap-server
 CVE-2026-92811 (browserless versions 1.44.0 through 2.56.7 fail to enforce file protoc ...)
-	TODO: check
+	NOT-FOR-US: browserless
 CVE-2026-92810 (PrestaShop blockwishlist through 3.0.2 fails to validate wishlist owne ...)
 	NOT-FOR-US: PrestaShop
 CVE-2026-92809 (PrestaShop psgdpr versions through 1.4.3 fail to validate that GDPR co ...)
@@ -34,25 +34,25 @@ CVE-2026-92804 (Nango through 0.70.4 fails to validate caller-supplied connectio
 CVE-2026-92803 (LibreTranslate through 1.9.6 omits the access_check decorator from the ...)
 	NOT-FOR-US: LibreTranslate
 CVE-2026-92802 (kan through 0.6.0 fails to properly validate board creation permission ...)
-	TODO: check
+	NOT-FOR-US: kan
 CVE-2026-92801 (cc-connect through 1.5.0 fails to enforce per-user allowlist filtering ...)
-	TODO: check
+	NOT-FOR-US: cc-connect
 CVE-2026-92800 (Docs before 5.4.1 fails to properly revoke websocket collaboration con ...)
-	TODO: check
+	NOT-FOR-US: Docs
 CVE-2026-92796 (Manticore Search versions 27.0.0 before 28.4.4 fail to validate permis ...)
-	TODO: check
+	NOT-FOR-US: Manticore Search
 CVE-2026-92795 (Coze Studio through 0.5.1 fails to restrict the server URL supplied wh ...)
-	TODO: check
+	NOT-FOR-US: Coze Studio
 CVE-2026-92794 (OpenSign through 2.41.3 fails to validate caller identity in the getDo ...)
-	TODO: check
+	NOT-FOR-US: OpenSignLabs OpenSign
 CVE-2026-92793 (GoAdmin through 1.2.26 fails to properly anchor the logout pattern whe ...)
-	TODO: check
+	NOT-FOR-US: GoAdmin
 CVE-2026-92792 (OpenNHP through 1.0.2 selects its trusted-execution attestation verifi ...)
-	TODO: check
+	NOT-FOR-US: OpenNHP
 CVE-2026-92791 (Uber Kraken through 0.1.29 fails to validate the tag parameter in the  ...)
-	TODO: check
+	NOT-FOR-US: Uber Kraken
 CVE-2026-92790 (Higress before 2.2.4 panics when processing a Cookie header segment wi ...)
-	TODO: check
+	NOT-FOR-US: Higress
 CVE-2026-92789 (Graylog through 7.1.4 validates outbound URLs against an allowlist bef ...)
 	TODO: check
 CVE-2026-92788 (Coze Studio through 0.5.1 fails to validate that table names in workfl ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dfe1d2814622d89b19d189012b490b3f138ee94d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dfe1d2814622d89b19d189012b490b3f138ee94d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260917/cac35213/attachment.htm>