Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
5fca9fc7 by Salvatore Bonaccorso at 2026-08-26T22:11:12+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -359,39 +359,39 @@ CVE-2026-80519 (In the Linux kernel, the following
vulnerability has been resolv
[bullseye] - linux <not-affected> (Vulnerable code not present)
NOTE:
https://git.kernel.org/linus/9e163917a86c6adfbe150e13f4c73653a54616de (7.2)
CVE-2026-80428 (ILIAS deserialises stored session data for an unauthenticated
caller. ...)
- TODO: check
+ NOT-FOR-US: ILIAS
CVE-2026-80427 (bestzip builds the argument list for the system zip utility
without se ...)
- TODO: check
+ NOT-FOR-US: bestzip Node.js module
CVE-2026-80426 (FiftyOne renders a dataset field's description as markup. The
sidebar ...)
- TODO: check
+ NOT-FOR-US: FiftyOne
CVE-2026-80350 (OneUptime's webhook target check rejects private and loopback
addresse ...)
- TODO: check
+ NOT-FOR-US: OneUptime
CVE-2026-80349 (TarsWeb decides whether a request comes from a trusted local
caller us ...)
- TODO: check
+ NOT-FOR-US: TarsWeb
CVE-2026-80348 (TarsWeb enforces its per-application roles by calling
AuthService from ...)
- TODO: check
+ NOT-FOR-US: TarsWeb
CVE-2026-80347 (mcp-fetch checks a fetch target against its SSRF guard without
removin ...)
- TODO: check
+ NOT-FOR-US: mcp-fetch
CVE-2026-80346 (StarRocks performs no privilege check when a legacy
synchronous materi ...)
- TODO: check
+ NOT-FOR-US: StarRocks
CVE-2026-80237 (EFence developed by Thinking Software Technology has an
Arbitrary File ...)
- TODO: check
+ NOT-FOR-US: EFence
CVE-2026-80236 (Efence developed by Thinking Software Technology has a SQL
Injection v ...)
- TODO: check
+ NOT-FOR-US: EFence
CVE-2026-80235 (EFence developed by Thinking Software Technology has an
Arbitrary File ...)
- TODO: check
+ NOT-FOR-US: EFence
CVE-2026-80234 (CAYIN CMS-WS and CMS-SE developed by CAYIN Technology have a
Missing A ...)
- TODO: check
+ NOT-FOR-US: CAYIN CMS-WS and CMS-SE
CVE-2026-80233 (CAYIN CMS-WS, CMS-SE, and SMP series products developed by
CAYIN Techn ...)
- TODO: check
+ NOT-FOR-US: CAYIN CMS-WS and CMS-SE and SMP series products
CVE-2026-80206 (NLTK before 3.10.3 contains a regular expression denial of
service (Re ...)
TODO: check
CVE-2026-80205 (NLTK versions before 3.10.0 contain a regular expression
denial of ser ...)
TODO: check
CVE-2026-80204 (The Grav API plugin (getgrav/grav-plugin-api) before 1.0.18
does not a ...)
- TODO: check
+ NOT-FOR-US: Grav plugin
CVE-2026-80203 (The getgrav/grav-plugin-api plugin before 1.0.18 does not
enforce API- ...)
- TODO: check
+ NOT-FOR-US: Grav plugin
CVE-2026-80153
REJECTED
CVE-2026-7487 (GitLab has remediated an issue in GitLab EE affecting all
versions fro ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5fca9fc7caa92e07fc4aff7f793092accc9c57c7
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5fca9fc7caa92e07fc4aff7f793092accc9c57c7
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
