Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
dfe1d281 by Salvatore Bonaccorso at 2026-09-17T10:38:47+02:00
Process some more NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -18,7 +18,7 @@ CVE-2026-92813 (Metabase through 0.63.18 fails to properly
validate the unspecif
CVE-2026-92812 (decap-server contains a path traversal vulnerability in the
local prox ...)
NOT-FOR-US: decap-server
CVE-2026-92811 (browserless versions 1.44.0 through 2.56.7 fail to enforce
file protoc ...)
- TODO: check
+ NOT-FOR-US: browserless
CVE-2026-92810 (PrestaShop blockwishlist through 3.0.2 fails to validate
wishlist owne ...)
NOT-FOR-US: PrestaShop
CVE-2026-92809 (PrestaShop psgdpr versions through 1.4.3 fail to validate that
GDPR co ...)
@@ -34,25 +34,25 @@ CVE-2026-92804 (Nango through 0.70.4 fails to validate
caller-supplied connectio
CVE-2026-92803 (LibreTranslate through 1.9.6 omits the access_check decorator
from the ...)
NOT-FOR-US: LibreTranslate
CVE-2026-92802 (kan through 0.6.0 fails to properly validate board creation
permission ...)
- TODO: check
+ NOT-FOR-US: kan
CVE-2026-92801 (cc-connect through 1.5.0 fails to enforce per-user allowlist
filtering ...)
- TODO: check
+ NOT-FOR-US: cc-connect
CVE-2026-92800 (Docs before 5.4.1 fails to properly revoke websocket
collaboration con ...)
- TODO: check
+ NOT-FOR-US: Docs
CVE-2026-92796 (Manticore Search versions 27.0.0 before 28.4.4 fail to
validate permis ...)
- TODO: check
+ NOT-FOR-US: Manticore Search
CVE-2026-92795 (Coze Studio through 0.5.1 fails to restrict the server URL
supplied wh ...)
- TODO: check
+ NOT-FOR-US: Coze Studio
CVE-2026-92794 (OpenSign through 2.41.3 fails to validate caller identity in
the getDo ...)
- TODO: check
+ NOT-FOR-US: OpenSignLabs OpenSign
CVE-2026-92793 (GoAdmin through 1.2.26 fails to properly anchor the logout
pattern whe ...)
- TODO: check
+ NOT-FOR-US: GoAdmin
CVE-2026-92792 (OpenNHP through 1.0.2 selects its trusted-execution
attestation verifi ...)
- TODO: check
+ NOT-FOR-US: OpenNHP
CVE-2026-92791 (Uber Kraken through 0.1.29 fails to validate the tag parameter
in the ...)
- TODO: check
+ NOT-FOR-US: Uber Kraken
CVE-2026-92790 (Higress before 2.2.4 panics when processing a Cookie header
segment wi ...)
- TODO: check
+ NOT-FOR-US: Higress
CVE-2026-92789 (Graylog through 7.1.4 validates outbound URLs against an
allowlist bef ...)
TODO: check
CVE-2026-92788 (Coze Studio through 0.5.1 fails to validate that table names
in workfl ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dfe1d2814622d89b19d189012b490b3f138ee94d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dfe1d2814622d89b19d189012b490b3f138ee94d
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
