Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
386f8b50 by Salvatore Bonaccorso at 2026-01-03T09:22:49+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -17,37 +17,37 @@ CVE-2026-21645
CVE-2026-21644
REJECTED
CVE-2026-21484 (AnythingLLM is an application that turns pieces of content
into contex ...)
- TODO: check
+ NOT-FOR-US: AnythingLLM
CVE-2026-21483 (listmonk is a standalone, self-hosted, newsletter and mailing
list man ...)
- TODO: check
+ NOT-FOR-US: listmonk
CVE-2026-21452 (MessagePack for Java is a serializer implementation for Java.
A denial ...)
- msgpack-java <unfixed>
NOTE:
https://github.com/msgpack/msgpack-java/security/advisories/GHSA-cw39-r4h6-8j3x
NOTE: Fixed by:
https://github.com/msgpack/msgpack-java/commit/daa2ea6b2f11f500e22c70a22f689f7a9debdeae
(v0.9.11)
CVE-2026-21451 (Bagisto is an open source laravel eCommerce platform. A stored
Cross-S ...)
- TODO: check
+ NOT-FOR-US: Bagisto
CVE-2026-21450 (Bagisto is an open source laravel eCommerce platform. Versions
prior t ...)
- TODO: check
+ NOT-FOR-US: Bagisto
CVE-2026-21449 (Bagisto is an open source laravel eCommerce platform. Versions
prior t ...)
- TODO: check
+ NOT-FOR-US: Bagisto
CVE-2026-21448 (Bagisto is an open source laravel eCommerce platform. Versions
prior t ...)
- TODO: check
+ NOT-FOR-US: Bagisto
CVE-2026-21447 (Bagisto is an open source laravel eCommerce platform. Prior to
version ...)
- TODO: check
+ NOT-FOR-US: Bagisto
CVE-2025-64125 (A vulnerability in Nuvation Energy nCloud VPN Service allowed
Network ...)
- TODO: check
+ NOT-FOR-US: Nuvation Energy nCloud VPN Service
CVE-2025-64124 (Improper Neutralization of Special Elements used in an OS
Command ('OS ...)
- TODO: check
+ NOT-FOR-US: Multi-Stack Controller (MSC)
CVE-2025-64123 (Unintended Proxy or Intermediary vulnerability in Nuvation
Energy Mult ...)
- TODO: check
+ NOT-FOR-US: Multi-Stack Controller (MSC)
CVE-2025-64122 (Insufficiently Protected Credentials vulnerability in Nuvation
Energy ...)
- TODO: check
+ NOT-FOR-US: Multi-Stack Controller (MSC)
CVE-2025-64121 (Authentication Bypass Using an Alternate Path or Channel
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Multi-Stack Controller (MSC)
CVE-2025-64120 (Improper Neutralization of Special Elements used in an OS
Command ('OS ...)
- TODO: check
+ NOT-FOR-US: Multi-Stack Controller (MSC)
CVE-2025-64119 (A vulnerability in Nuvation Battery Management System allows
Authentic ...)
- TODO: check
+ NOT-FOR-US: Nuvation Battery Management System
CVE-2026-21446 (Bagisto is an open source laravel eCommerce platform. In
versions on t ...)
NOT-FOR-US: Bagisto
CVE-2026-21445 (Langflow is a tool for building and deploying AI-powered
agents and wo ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/386f8b5057aaf8047da58ab3564ce7d7366cf866
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/386f8b5057aaf8047da58ab3564ce7d7366cf866
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
