Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a5382b34 by Salvatore Bonaccorso at 2026-07-22T22:58:05+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2411,19 +2411,19 @@ CVE-2026-60144 (Vulnerability in the Oracle Workflow
product of Oracle E-Busines
CVE-2026-60143 (Vulnerability in the Oracle Workflow product of Oracle
E-Business Suit ...)
NOT-FOR-US: Oracle
CVE-2026-59147 (Data::DisjointSet::Shared versions before 0.02 for Perl allow
out-of-b ...)
- TODO: check
+ NOT-FOR-US: Data::DisjointSet::Shared Perl module
CVE-2026-59146 (Data::SpatialHash::Shared versions before 0.02 for Perl allow
out-of-b ...)
- TODO: check
+ NOT-FOR-US: Data::SpatialHash::Shared Perl module
CVE-2026-59145 (Data::Intern::Shared versions before 0.02 for Perl allow an
out-of-bou ...)
- TODO: check
+ NOT-FOR-US: Data::Intern::Shared Perl module
CVE-2026-59144 (Data::RingBuffer::Shared versions before 0.04 for Perl allow a
stack b ...)
- TODO: check
+ NOT-FOR-US: Data::RingBuffer::Shared Perl module
CVE-2026-59143 (Data::RoaringBitmap::Shared versions before 0.02 for Perl
allow an out ...)
- TODO: check
+ NOT-FOR-US: Data::RoaringBitmap::Shared Perl module
CVE-2026-56852 (A norm.Iter can enter an infinite loop when handling input
containing ...)
TODO: check
CVE-2026-56844 (A vulnerability in the Veeam Updater component of the Veeam
Software A ...)
- TODO: check
+ NOT-FOR-US: Veeam
CVE-2026-56820 (Netty is a network application framework for development of
protocol s ...)
TODO: check
CVE-2026-56819 (Netty is a network application framework for development of
protocol s ...)
@@ -2447,27 +2447,27 @@ CVE-2026-56144 (Incorrect Authorization (CWE-863) in
Elasticsearch can allow an
CVE-2026-55851 (Netty is a network application framework for development of
protocol s ...)
TODO: check
CVE-2026-52476 (SQL Injection vulnerability in aiflowy <= 2.1.2 allows a
remote attack ...)
- TODO: check
+ NOT-FOR-US: aiflowy
CVE-2026-52475 (Cross Site Scripting vulnerability in aiflowy <= 2.1.2 allows
a remote ...)
- TODO: check
+ NOT-FOR-US: aiflowy
CVE-2026-52474 (An issue in aiflowy <= 2.1.2 allows a remote attacker to
obtain sensit ...)
- TODO: check
+ NOT-FOR-US: aiflowy
CVE-2026-52472 (SQL injection vulnerability in Wgcloud 3.6.4 allows a remote
attacker ...)
- TODO: check
+ NOT-FOR-US: Wgcloud
CVE-2026-52470 (SQL injection vulnerability in Crocus v.1.3.44 allows a remote
attacke ...)
- TODO: check
+ NOT-FOR-US: Crocus
CVE-2026-52469 (SQL injection vulnerability in Crocus v.1.3.44 allows a remote
attacke ...)
- TODO: check
+ NOT-FOR-US: Crocus
CVE-2026-50759 (An issue in exo-explore exo 1.0.69 allows a remote attacker to
escalat ...)
- TODO: check
+ NOT-FOR-US: exo-explore exo
CVE-2026-50758 (Cross Site Scripting vulnerability in DayuanJiang
next-ai-draw-io 0.4. ...)
- TODO: check
+ NOT-FOR-US: DayuanJiang next-ai-draw-io
CVE-2026-50757 (Directory Traversal vulnerability in DayuanJiang
next-ai-draw-io 0.4.1 ...)
- TODO: check
+ NOT-FOR-US: DayuanJiang next-ai-draw-io
CVE-2026-50756 (An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote
attacke ...)
- TODO: check
+ NOT-FOR-US: DayuanJiang next-ai-draw-io
CVE-2026-50755 (An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote
attacke ...)
- TODO: check
+ NOT-FOR-US: DayuanJiang next-ai-draw-io
CVE-2026-49092 (Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441)
in Kiba ...)
TODO: check
CVE-2026-47731 (The AMMOS Instrument Toolkit (Formerly the Bespoke Links to
Instrument ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a5382b348eb5f8788cd3e7b86d9eed20ecdb0183
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a5382b348eb5f8788cd3e7b86d9eed20ecdb0183
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
