Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d0650d93 by Salvatore Bonaccorso at 2026-08-27T21:59:50+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,23 +1,23 @@
CVE-2026-81827 (Affected versions of Flowintel incorrectly attempted to
validate login ...)
- TODO: check
+ NOT-FOR-US: Flowintel
CVE-2026-81826 (Affected versions of Flowintel do not revoke existing
authenticated se ...)
- TODO: check
+ NOT-FOR-US: Flowintel
CVE-2026-81820 (Affected versions of Flowintel construct timeline HTML using
attacker- ...)
- TODO: check
+ NOT-FOR-US: Flowintel
CVE-2026-81819 (Affected versions of Flowintel expose the /my_assignment/user
API endp ...)
- TODO: check
+ NOT-FOR-US: Flowintel
CVE-2026-81818 (Affected versions of Flowintel contain an authorization flaw
in the ad ...)
- TODO: check
+ NOT-FOR-US: Flowintel
CVE-2026-81817 (Affected versions of Flowintel contain an insecure direct
object refer ...)
- TODO: check
+ NOT-FOR-US: Flowintel
CVE-2026-81814 (Affected versions of Flowintel render calendar event titles
using inne ...)
- TODO: check
+ NOT-FOR-US: Flowintel
CVE-2026-81753 (Affected versions of Flowintel render Mermaid blocks contained
in stor ...)
- TODO: check
+ NOT-FOR-US: Flowintel
CVE-2026-81743 (Affected versions of Flowintel allow the LOG_FILE
configuration value ...)
- TODO: check
+ NOT-FOR-US: Flowintel
CVE-2026-81735 (startServer.ts in the mcp-http-server package of
UI-TARS-desktop defau ...)
- TODO: check
+ NOT-FOR-US: mcp-http-server
CVE-2026-81727 (NLTK versions before 3.10.3 contain a filesystem containment
bypass vu ...)
TODO: check
CVE-2026-81726 (NLTK through 3.10.3 contains a path traversal vulnerability in
model-a ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d0650d93a374d0673476e09930899aadb2bd81ca
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d0650d93a374d0673476e09930899aadb2bd81ca
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits