Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
4df31a21 by Salvatore Bonaccorso at 2026-09-01T09:36:39+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -37,49 +37,49 @@ CVE-2026-82852 (Unauthenticated Server Side Request Forgery
(SSRF) in MapSVG <=
CVE-2026-82835 (A weakness has been identified in caoqianming django-vue-admin
1.0. Th ...)
NOT-FOR-US: caoqianming django-vue-admin
CVE-2026-82834 (A security flaw has been discovered in Doccano Open Source
Annotation ...)
- TODO: check
+ NOT-FOR-US: Doccano Open Source Annotation Tools
CVE-2026-82833 (A vulnerability was identified in Doccano Open Source
Annotation Tools ...)
- TODO: check
+ NOT-FOR-US: Doccano Open Source Annotation Tools
CVE-2026-82749 (Incorrect Authorization vulnerability in ash-project ash
widens a rela ...)
- TODO: check
+ NOT-FOR-US: ash-project
CVE-2026-82748 (Incorrect Authorization vulnerability in ash-project ash
authorizes an ...)
- TODO: check
+ NOT-FOR-US: ash-project
CVE-2026-82747 (Incorrect Authorization vulnerability in ash-project ash
returns recor ...)
- TODO: check
+ NOT-FOR-US: ash-project
CVE-2026-82746 (Missing Authorization vulnerability in ash-project ash allows
an actor ...)
- TODO: check
+ NOT-FOR-US: ash-project
CVE-2026-82745 (Improper Access Control vulnerability in ash-project ash lets
a create ...)
- TODO: check
+ NOT-FOR-US: ash-project
CVE-2026-82744 (Not Failing Securely (Failing Open) vulnerability in
ash-project ash s ...)
- TODO: check
+ NOT-FOR-US: ash-project
CVE-2026-82743 (Uncontrolled Resource Consumption vulnerability in ash-project
ash let ...)
- TODO: check
+ NOT-FOR-US: ash-project
CVE-2026-82742 (Uncontrolled Resource Consumption vulnerability in ash-project
ash let ...)
- TODO: check
+ NOT-FOR-US: ash-project
CVE-2026-82741 (Improper Validation of Specified Type of Input vulnerability
in ash-pr ...)
- TODO: check
+ NOT-FOR-US: ash-project
CVE-2026-82740 (Improper Input Validation vulnerability in ash-project ash
fails to en ...)
- TODO: check
+ NOT-FOR-US: ash-project
CVE-2026-82739 (Generation of Error Message Containing Sensitive Information
vulnerabi ...)
- TODO: check
+ NOT-FOR-US: ash-project
CVE-2026-82738 (Improper Input Validation vulnerability in ash-project ash
allows an a ...)
- TODO: check
+ NOT-FOR-US: ash-project
CVE-2026-82737 (Integer Overflow or Wraparound vulnerability in ash-project
ash lets a ...)
- TODO: check
+ NOT-FOR-US: ash-project
CVE-2026-82736 (Incorrect Behavior Order: Validate Before Canonicalize
vulnerability i ...)
- TODO: check
+ NOT-FOR-US: ash-project
CVE-2026-82735 (Uncontrolled Resource Consumption vulnerability in ash-project
ash all ...)
- TODO: check
+ NOT-FOR-US: ash-project
CVE-2026-82734 (Improper Validation of Specified Quantity in Input
vulnerability in as ...)
- TODO: check
+ NOT-FOR-US: ash-project
CVE-2026-82733 (Generation of Error Message Containing Sensitive Information
vulnerabi ...)
- TODO: check
+ NOT-FOR-US: ash-project
CVE-2026-82732 (Improper Input Validation vulnerability in ash-project
ash_typescript ...)
- TODO: check
+ NOT-FOR-US: ash-project
CVE-2026-82731 (URL Redirection to Untrusted Site ('Open Redirect')
vulnerability in a ...)
- TODO: check
+ NOT-FOR-US: ash-project
CVE-2026-82730 (Incorrect Authorization vulnerability in ash-project
ash_typescript al ...)
- TODO: check
+ NOT-FOR-US: ash-project
CVE-2026-82398 (pypdf is a free and open-source pure-python PDF library. Prior
to 6.15 ...)
- pypdf <unfixed>
- pypdf2 <removed>
@@ -89,11 +89,11 @@ CVE-2026-82398 (pypdf is a free and open-source pure-python
PDF library. Prior t
CVE-2026-82397 (Tornado is a Python web framework and asynchronous networking
library. ...)
TODO: check
CVE-2026-82396 (Sulu is an open-source PHP content management system based on
the Symf ...)
- TODO: check
+ NOT-FOR-US: Sulu
CVE-2026-82395 (Sulu is an open-source PHP content management system based on
the Symf ...)
- TODO: check
+ NOT-FOR-US: Sulu
CVE-2026-82394 (Sulu is an open-source PHP content management system based on
the Symf ...)
- TODO: check
+ NOT-FOR-US: Sulu
CVE-2026-82393 (pnpm is a package manager. Prior to 10.34.5 and 11.11.0, pnpm
accepts ...)
TODO: check
CVE-2026-82392 (pnpm is a package manager. Prior to 10.34.5 and from 11.0.0
until 11.1 ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4df31a21081067e56f9ec63310de99e25449d151
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4df31a21081067e56f9ec63310de99e25449d151
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
