Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0c277f64 by Salvatore Bonaccorso at 2026-08-31T21:26:48+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,63 +1,63 @@
CVE-2026-83497 (Unrestricted deserialization of untrusted data in the cursor
paginatio ...)
NOT-FOR-US: Amazon
CVE-2026-83492 (Improper input validation vulnerability in Extend Themes Kubio
AI Webs ...)
- TODO: check
+ NOT-FOR-US: Kubio AI Website Builder
CVE-2026-82970 (Unrestricted Upload of File with Dangerous Type vulnerability
in WP Le ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-82881 (Aix-DB through 1.2.4 renders markdown with raw HTML enabled
into v-htm ...)
- TODO: check
+ NOT-FOR-US: Aix-DB
CVE-2026-82880 (YaCy Search Server through 1.941 contains an XML external
entity injec ...)
- TODO: check
+ NOT-FOR-US: YaCy Search Server
CVE-2026-82879 (DataEase before 2.10.26 contains multiple access control
defects in th ...)
NOT-FOR-US: DataEase
CVE-2026-82878 (DataEase versions before 2.10.26 omit object-level
authorization check ...)
NOT-FOR-US: DataEase
CVE-2026-82877 (ILIAS versions before 9.22, 10.0 through 10.9, and 11.0
through 11.2 c ...)
- TODO: check
+ NOT-FOR-US: ILIAS
CVE-2026-82876 (Phison PS3111-S11 controller firmware verifies RSA signatures
using a ...)
- TODO: check
+ NOT-FOR-US: Phison PS3111-S11 controller firmware
CVE-2026-82875 (ToolJet before v3.16.208 contains an authorization bypass
vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: ToolJet
CVE-2026-82874 (ToolJet before v3.16.208 fails to validate that authenticated
users be ...)
- TODO: check
+ NOT-FOR-US: ToolJet
CVE-2026-82873 (ToolJet through 3.0.0-ee-beta.2 contains authorization bypass
vulnerab ...)
- TODO: check
+ NOT-FOR-US: ToolJet
CVE-2026-82872 (ToolJet before v3.16.208 fails to validate that the path
organizationI ...)
- TODO: check
+ NOT-FOR-US: ToolJet
CVE-2026-82871 (ToolJet before v3.16.208 fails to validate organization
membership in ...)
- TODO: check
+ NOT-FOR-US: ToolJet
CVE-2026-82870 (ToolJet before v3.16.208 fails to validate organizationId
ownership in ...)
- TODO: check
+ NOT-FOR-US: ToolJet
CVE-2026-82869 (ToolJet Database versions before v3.16.44 contain a privilege
escalati ...)
- TODO: check
+ NOT-FOR-US: ToolJet
CVE-2026-82868 (@pdfme/schemas before 5.5.9 contains a cross-site scripting
vulnerabil ...)
- TODO: check
+ NOT-FOR-US: pdfme/schemas
CVE-2026-82867 (@pdfme/schemas before 5.5.9 contains a cross-site scripting
vulnerabil ...)
- TODO: check
+ NOT-FOR-US: pdfme/schemas
CVE-2026-82866 (@pdfme/common before 5.5.10 contains a server-side request
forgery vul ...)
- TODO: check
+ NOT-FOR-US: pdfme/common
CVE-2026-82865 (pdfme schemas before 5.5.10 contains a cross-site scripting
vulnerabil ...)
- TODO: check
+ NOT-FOR-US: pdfme/schemas
CVE-2026-82864 (pdfme pdf-lib versions before 5.5.10 contain an unbounded
buffer growt ...)
- TODO: check
+ NOT-FOR-US: pdfme/pdf-lib
CVE-2026-82863 (@hulumi/baseline versions before 1.3.2 fail to fully detect
CloudTrail ...)
- TODO: check
+ NOT-FOR-US: hulumi/baseline
CVE-2026-82862 (Hulumi versions before v1.3.2 resolve the threat-model helper
script f ...)
- TODO: check
+ NOT-FOR-US: Hulumi
CVE-2026-82861 (@hulumi/policies versions before 1.3.2 contain a parent spoof
bypass v ...)
- TODO: check
+ NOT-FOR-US: Hulumi
CVE-2026-82860 (@hulumi/policies versions before 1.3.2 fail to fully inspect
inline an ...)
- TODO: check
+ NOT-FOR-US: Hulumi
CVE-2026-82859 (hulumi versions before v1.3.2 contain a deployment SCP
template that a ...)
- TODO: check
+ NOT-FOR-US: Hulumi
CVE-2026-82858 (@hulumi/drift versions before 1.3.2 accept externally supplied
execute ...)
- TODO: check
+ NOT-FOR-US: Hulumi
CVE-2026-82857 (hulumi versions before v1.3.2 contain a privilege escalation
vulnerabi ...)
- TODO: check
+ NOT-FOR-US: Hulumi
CVE-2026-82856 (@hulumi/policies versions before 1.3.2 fail to properly
validate set-q ...)
- TODO: check
+ NOT-FOR-US: Hulumi
CVE-2026-82855 (@hulumi/policies versions before 1.3.2 contain an evidence
validation ...)
- TODO: check
+ NOT-FOR-US: Hulumi
CVE-2026-82854 (Nodemailer before 8.0.4 is vulnerable to SMTP command
injection throug ...)
TODO: check
CVE-2026-82853 (Nodemailer versions before 8.0.5 contain an SMTP command
injection vul ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0c277f64f3f99fa84f3c68a04c975c48a7c48e3a
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0c277f64f3f99fa84f3c68a04c975c48a7c48e3a
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
