Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
4e540808 by Salvatore Bonaccorso at 2026-10-01T11:24:03+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -85,41 +85,41 @@ CVE-2026-76142 (Insufficient authentication and access
control on the internal-o
CVE-2026-67075 (HCL Digital Experience is affected by improper input
sanitation. This ...)
NOT-FOR-US: HCL
CVE-2026-51872 (Devika v1.0 is vulnerable to Code Injection via the
Runner.run_code fu ...)
- TODO: check
+ NOT-FOR-US: Devika
CVE-2026-51871 (Devika v1.0 is vulnerable to Code Injection in the
Runner.execute func ...)
- TODO: check
+ NOT-FOR-US: Devika
CVE-2026-51870 (DeepTutor v1.4.0 is vulnerable to command execution in
/tutorbot/agent ...)
- TODO: check
+ NOT-FOR-US: DeepTutor
CVE-2026-51869 (DB-GPT v0.8.0 sandbox API silently falls back to LocalRuntime
and exec ...)
- TODO: check
+ NOT-FOR-US: DB-GPT
CVE-2026-51867 (agentgpt v.1.0.0 is vulnerable to Incorrect Access Control in
next/src ...)
- TODO: check
+ NOT-FOR-US: agentgpt
CVE-2026-51866 (In DB-GPT 0.7.5 and 0.8.0, a skill uploaded through the real
/api/v1/s ...)
- TODO: check
+ NOT-FOR-US: DB-GPT
CVE-2026-51864 (DB-GPT v0.7.5 and v0.8.0 contains directory traversal in
python_file_u ...)
- TODO: check
+ NOT-FOR-US: DB-GPT
CVE-2026-51862 (DB-GPT 0.8.0 contains directory traversal in skill_upload
(packages/db ...)
- TODO: check
+ NOT-FOR-US: DB-GPT
CVE-2026-51861 (bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Code
Injection ...)
- TODO: check
+ NOT-FOR-US: bisheng
CVE-2026-51860 (bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to
Directory Trave ...)
- TODO: check
+ NOT-FOR-US: bisheng
CVE-2026-51859 (bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to
directory trave ...)
- TODO: check
+ NOT-FOR-US: bisheng
CVE-2026-51858 (In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3,
TerminalToolkit.s ...)
- TODO: check
+ NOT-FOR-US: camel-ai camel
CVE-2026-51857 (In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3,
CodeExecutionTool ...)
- TODO: check
+ NOT-FOR-US: camel-ai camel
CVE-2026-51856 (In agentscope 1.0.18, 1.0.19, and 1.0.19 when the
RealtimeAgent sessio ...)
- TODO: check
+ NOT-FOR-US: agentscope
CVE-2026-51853 (agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory
Traversa ...)
- TODO: check
+ NOT-FOR-US: agent-zero
CVE-2026-51852 (agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory
Traversa ...)
- TODO: check
+ NOT-FOR-US: agent-zero
CVE-2026-51570 (modelscope Agentscope v1.0.0-v1.0.8 is vulnerable to Path
Traversal in ...)
- TODO: check
+ NOT-FOR-US: modelscope Agentscope
CVE-2026-51568 (modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path
Traversal i ...)
- TODO: check
+ NOT-FOR-US: modelscope Agentscope
CVE-2026-47096 (AJA HELO Plus firmware before 2.1.7 contains a stored
cross-site scrip ...)
TODO: check
CVE-2026-19253 (The Cache Enabler WordPress plugin before 1.8.17 does not
validate a U ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4e540808aef0e6b79013b0e66c56737ac90a0224
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4e540808aef0e6b79013b0e66c56737ac90a0224
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
