[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Sep 18 21:59:18 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
38fd65f7 by Salvatore Bonaccorso at 2026-09-18T22:58:55+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -91,17 +91,17 @@ CVE-2026-93600 (rustls-webpki (rustls/webpki) versions 0.101.0 through 0.103.11
 	- rust-rustls-webpki 0.103.13+ds-1
 	NOTE: https://github.com/rustls/webpki/security/advisories/GHSA-965h-392x-2mh5
 CVE-2026-93598 (ArcadeDB (Maven artifact com.arcadedb:arcadedb-engine) through 26.8.1  ...)
-	TODO: check
+	NOT-FOR-US: ArcadeDB
 CVE-2026-93597 (ArcadeDB versions before 26.9.1 fail to validate IPv6 transition addre ...)
-	TODO: check
+	NOT-FOR-US: ArcadeDB
 CVE-2026-93596 (ArcadeDB before 26.9.1 (com.arcadedb:arcadedb-engine <= 26.8.1) fails  ...)
-	TODO: check
+	NOT-FOR-US: ArcadeDB
 CVE-2026-93595 (ArcadeDB before 26.9.1 contains an access control bypass vulnerability ...)
-	TODO: check
+	NOT-FOR-US: ArcadeDB
 CVE-2026-93594 (ArcadeDB (Maven artifact com.arcadedb:arcadedb-engine) through 26.8.1  ...)
-	TODO: check
+	NOT-FOR-US: ArcadeDB
 CVE-2026-93593 (ArcadeDB before 26.9.1 fails to enforce security-group types ACL entri ...)
-	TODO: check
+	NOT-FOR-US: ArcadeDB
 CVE-2026-93592 (vLLM versions before 0.28.0 fail to validate the lower bound of token  ...)
 	TODO: check
 CVE-2026-93591 (SiYuan versions before 3.8.3 contain an SQL injection vulnerability in ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/38fd65f70c94b26db01f1f510e29bab72ff0bd36

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/38fd65f70c94b26db01f1f510e29bab72ff0bd36
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260918/0b96cb84/attachment.htm>


More information about the debian-security-tracker-commits mailing list