Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
6848bdbf by Salvatore Bonaccorso at 2026-08-13T08:25:58+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1304,7 +1304,7 @@ CVE-2026-72553 (A stored cross-site scripting
vulnerability in ElkArte Forum 2.0
CVE-2026-72552 (A server-side request forgery vulnerability in Dub as of
2026-07-10 al ...)
TODO: check
CVE-2026-72551 (A remote code execution vulnerability in Apioo Fusio 8.8.3
allows auth ...)
- TODO: check
+ NOT-FOR-US: Apioo Fusio
CVE-2026-72550 (An SQL injection vulnerability in Friendica through the
2026.08-dev br ...)
NOT-FOR-US: Friendica
CVE-2026-72549 (An information disclosure vulnerability in OpenSignLabs
OpenSign throu ...)
@@ -1312,9 +1312,9 @@ CVE-2026-72549 (An information disclosure vulnerability
in OpenSignLabs OpenSign
CVE-2026-72548 (An information disclosure vulnerability in OpenSignLabs
OpenSign throu ...)
NOT-FOR-US: OpenSignLabs OpenSign
CVE-2026-72547 (An insecure direct object reference vulnerability in Attendize
through ...)
- TODO: check
+ NOT-FOR-US: Attendize
CVE-2026-72546 (An insecure direct object reference vulnerability in Attendize
through ...)
- TODO: check
+ NOT-FOR-US: Attendize
CVE-2026-72545 (An insecure direct object reference vulnerability in
OpenSignLabs Open ...)
NOT-FOR-US: OpenSignLabs OpenSign
CVE-2026-72544 (An integrity verification vulnerability in OpenSignLabs
OpenSign throu ...)
@@ -1330,13 +1330,13 @@ CVE-2026-72540 (An insecure direct object reference
vulnerability in PhotoPrism
CVE-2026-72539 (An information disclosure vulnerability in Windmill Labs
Windmill thro ...)
NOT-FOR-US: Windmill
CVE-2026-72538 (An argument injection vulnerability in PrefectHQ Prefect
through 3.8.2 ...)
- TODO: check
+ NOT-FOR-US: PrefectHQ Prefect
CVE-2026-72537 (A privilege escalation vulnerability in Authentik Security
authentik t ...)
NOT-FOR-US: authentik
CVE-2026-72536 (A missing authentication vulnerability in Chaskiq through
commit 46dfd ...)
- TODO: check
+ NOT-FOR-US: chaskiq
CVE-2026-72535 (A missing authentication vulnerability in Chaskiq through
commit 46dfd ...)
- TODO: check
+ NOT-FOR-US: chaskiq
CVE-2026-72534 (A privilege escalation vulnerability in Authentik Security
authentik t ...)
NOT-FOR-US: authentik
CVE-2026-72533 (An authentication bypass vulnerability in Portainer CE through
2.44.0 ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6848bdbf769eb0b5d67e2365599c150ff30f5f9d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6848bdbf769eb0b5d67e2365599c150ff30f5f9d
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
