Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
30567953 by Salvatore Bonaccorso at 2026-10-04T21:30:45+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -5,13 +5,13 @@ CVE-2026-97276 (Improper Neutralization of Input During Web
Page Generation ('Cr
CVE-2026-105224 (YesWiki before 4.6.7 contains a cross-site scripting
vulnerability in ...)
NOT-FOR-US: YesWiki
CVE-2026-105219 (Mammoth.js 1.3.0 before 1.12.3 contains a regular expression
denial of ...)
- TODO: check
+ NOT-FOR-US: mammoth (aka mammoth.js) Node.js module
CVE-2026-105218 (gopay before 1.5.119 disables TLS certificate verification in
defaultC ...)
- TODO: check
+ NOT-FOR-US: gopay
CVE-2026-105217 (Cockpit CMS 2.12.0 before 2.14.1 disables TLS certificate
verification ...)
- TODO: check
+ NOT-FOR-US: Cockpit CMS
CVE-2026-105216 (go-micro before 6.0.0 contains an improper certificate
validation vuln ...)
- TODO: check
+ NOT-FOR-US: go-micro
CVE-2026-105215 (ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an
authentication ...)
NOT-FOR-US: ZITADEL
CVE-2026-105214 (Zitadel before 4.16.2 contains a server-side request forgery
vulnerabi ...)
@@ -35,29 +35,29 @@ CVE-2026-105206 (ZITADEL 3.0.0 through 3.4.15 and 4.x
before 4.17.3 contains an
CVE-2026-105205 (SiYuan before 3.8.5 contains an information disclosure
vulnerability t ...)
NOT-FOR-US: SiYuan
CVE-2026-105161 (A flaw has been found in invariant-systems-ai aiir up to
1.7.0. The af ...)
- TODO: check
+ NOT-FOR-US: invariant-systems-ai aiir
CVE-2026-105158 (A vulnerability was detected in RainyGao DocSys up to
2.02.85. The imp ...)
- TODO: check
+ NOT-FOR-US: RainyGao DocSys
CVE-2026-105157 (A security vulnerability has been detected in RainyGao DocSys
up to 2. ...)
- TODO: check
+ NOT-FOR-US: RainyGao DocSys
CVE-2026-105156 (A weakness has been identified in YzmCMS up to 7.6. Impacted
is the fu ...)
- TODO: check
+ NOT-FOR-US: YzmCMS
CVE-2026-105149 (A security flaw has been discovered in mooSocial up to 3.2.4.
This iss ...)
- TODO: check
+ NOT-FOR-US: mooSocial
CVE-2026-105148 (A vulnerability was identified in SciPhi-AI R2R up to 3.6.6.
This vuln ...)
- TODO: check
+ NOT-FOR-US: SciPhi-AI R2R
CVE-2026-105147 (A vulnerability was determined in SciPhi-AI R2R up to 3.6.6.
This affe ...)
- TODO: check
+ NOT-FOR-US: SciPhi-AI R2R
CVE-2026-105146 (A vulnerability was found in Comsenz Discuz!
X5.0-20260801/X5.0-202608 ...)
- TODO: check
+ NOT-FOR-US: Discuz!
CVE-2026-105145 (A vulnerability has been found in Weaviate Verba up to 2.1.3.
Affected ...)
- TODO: check
+ NOT-FOR-US: Weaviate Verba
CVE-2026-105144 (A flaw has been found in Drogon up to 1.9.13-1/10.0-beta.3 on
Windows. ...)
- TODO: check
+ NOT-FOR-US: Drogon
CVE-2026-105141 (A security flaw has been discovered in topoteretes cognee up
to 1.5.4. ...)
- TODO: check
+ NOT-FOR-US: topoteretes cognee
CVE-2026-105137 (A vulnerability was found in Laradock up to 20.4. Impacted is
an unkno ...)
- TODO: check
+ NOT-FOR-US: Laradock
CVE-2026-105089 (WWBN AVideo through 29.2.0 contains a stored cross-site
scripting vuln ...)
NOT-FOR-US: WWBN AVideo
CVE-2026-105086 (WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site
scripting ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/30567953fbb3605588c01062660051b1801230cd
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/30567953fbb3605588c01062660051b1801230cd
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
