[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4b9a5ac3 by Salvatore Bonaccorso at 2026-09-23T14:05:30+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -360,9 +360,9 @@ CVE-2026-89425 (UTF8DataInputJsonParser._reportInvalidToken() in FasterXML jacks
 CVE-2026-89331 (The FluentBoards  WordPress plugin before 2.1.0 does not properly rest ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-89282 (The Apache Lounge Windows distribution of Apache HTTP Server build con ...)
-	TODO: check
+	NOT-FOR-US: Apache Lounge Windows distribution
 CVE-2026-89281 (The Apache Lounge Windows distribution of Apache HTTP Server build con ...)
-	TODO: check
+	NOT-FOR-US: Apache Lounge Windows distribution
 CVE-2026-89019
 	REJECTED
 CVE-2026-88997 (The JSM Show Post Metadata WordPress plugin before 4.9.1 does not prop ...)
@@ -370,19 +370,19 @@ CVE-2026-88997 (The JSM Show Post Metadata WordPress plugin before 4.9.1 does no
 CVE-2026-88929 (The Product Badge, Label, Countdown Timer for WooCommerce  WordPress p ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-88624 (Missing path validation in the Worktree.remove component of openCode v ...)
-	TODO: check
+	NOT-FOR-US: openCode
 CVE-2026-88419 (An unrestricted upload of files with a dangerous type in the thumbnail ...)
-	TODO: check
+	NOT-FOR-US: WuzhiCMS
 CVE-2026-88418 (CMSimple 5.24 ships with CSRF protection disabled by default, which tu ...)
-	TODO: check
+	NOT-FOR-US: CMSimple
 CVE-2026-88416 (MCMS 6.1.1 through 6.2.1 has a SQL injection vulnerability in the cust ...)
-	TODO: check
+	NOT-FOR-US: MCMS
 CVE-2026-88350 (An integer overflow vulnerability exists in MPack 1.1.1 in mpack_node_ ...)
 	TODO: check
 CVE-2026-88345 (An out-of-bounds read vulnerability exists in the schema lexer of flat ...)
-	TODO: check
+	NOT-FOR-US: Dvidelabs flatcc
 CVE-2026-88344 (An out-of-bounds read vulnerability exists in the schema lexer of flat ...)
-	TODO: check
+	NOT-FOR-US: Dvidelabs flatcc
 CVE-2026-88341 (A reachable assertion vulnerability exists in YARA 4.5.8 when loading  ...)
 	TODO: check
 CVE-2026-88340 (An invalid pointer release vulnerability exists in YARA 4.5.8 during d ...)
@@ -390,7 +390,7 @@ CVE-2026-88340 (An invalid pointer release vulnerability exists in YARA 4.5.8 du
 CVE-2026-88339 (A NULL pointer dereference vulnerability exists in the gf_sg_vrml_fiel ...)
 	TODO: check
 CVE-2026-88020 (Autonomy Logic OpenPLC 3is susceptible to an improper neutralization o ...)
-	TODO: check
+	NOT-FOR-US: OpenPLC
 CVE-2026-87981 (The Paymob for WooCommerce WordPress plugin before 4.1.14 does not per ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-87979 (The Paymob for WooCommerce WordPress plugin before 4.1.14 does not ver ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4b9a5ac379e038f7bfc20cd4d767a2d0aefd5b46

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4b9a5ac379e038f7bfc20cd4d767a2d0aefd5b46
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260923/203a1bdc/attachment-0001.htm>