Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0e99fd63 by security tracker role at 2026-06-23T07:13:57+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,13 +1,13 @@
CVE-2026-8379 (The Frontend File Manager Plugin WordPress plugin through 23.6
does no ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-8378 (The Frontend File Manager Plugin WordPress plugin through 23.6
does no ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-8172 (The Simple Basic Contact Form WordPress plugin through 20250114
does n ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-8163 (The Infility Global WordPress plugin before 2.15.19 does not
properly ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-7842 (The Infility Global Infility Global WordPress plugin before
2.15.20 fo ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-56698 (Nuxt versions 4.0.0 before 4.4.7 and 3.x before 3.21.7 fail to
validat ...)
TODO: check
CVE-2026-56697 (Nuxt versions 4.0.0 before 4.4.7 and 3.x before 3.21.7 accept
protocol ...)
@@ -131,13 +131,13 @@ CVE-2026-44727 (Jupyter Server is the backend for Jupyter
web applications. Prio
CVE-2026-44311 (Fabric.js is a Javascript HTML5 canvas library. Prior to
7.4.0, a pote ...)
TODO: check
CVE-2026-44274 (Dell Wyse Management Suite (WMS), versions prior to WMS 2605,
contain ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-44273 (Dell Wyse Management Suite (WMS), versions prior to WMS 2605,
contain ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-44272 (Dell Wyse Management Suite (WMS), versions prior to WMS 2605,
contain ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-44271 (Dell Wyse Management Suite (WMS), versions prior to WMS 2605,
contain ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-41523 (vLLM is an inference and serving engine for large language
models (LLM ...)
TODO: check
CVE-2026-41479 (Authlib is a Python library which builds OAuth and OpenID
Connect serv ...)
@@ -147,15 +147,15 @@ CVE-2026-39904 (Gophish through 0.12.1 contains a denial
of service vulnerabilit
CVE-2026-12866 (All versions of the package expr-eval are vulnerable to Code
Execution ...)
TODO: check
CVE-2026-11833 (Overview: A vulnerability has been found in FAST/TOOLS and CI
Server. ...)
- TODO: check
+ NOT-FOR-US: Yokogawa
CVE-2026-10852 (IBM i 7.6, 7.5, 7.4, and 7.3, IBM WebSphere Application
Server, and IB ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2026-10658 (A missing length validation in the Zephyr Bluetooth Host ISO
receive p ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-10651 (A malformed Bluetooth Classic SDP attribute can trigger a
reachable as ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-10645 (Zephyr's ext2 directory-entry parser does not fully validate
on-disk d ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2025-71358 (picklescan before 0.0.29 fails to detect malicious pickle
files that e ...)
TODO: check
CVE-2025-71344 (picklescan before 0.0.30 (affected versions 0.0.26 and
earlier) fails ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0e99fd631d602c9879f6c87946bdeba9b0b80c61
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0e99fd631d602c9879f6c87946bdeba9b0b80c61
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
