Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0f43d6a5 by Salvatore Bonaccorso at 2026-10-04T21:24:12+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -13,25 +13,25 @@ CVE-2026-105217 (Cockpit CMS 2.12.0 before 2.14.1 disables
TLS certificate verif
CVE-2026-105216 (go-micro before 6.0.0 contains an improper certificate
validation vuln ...)
TODO: check
CVE-2026-105215 (ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an
authentication ...)
- TODO: check
+ NOT-FOR-US: ZITADEL
CVE-2026-105214 (Zitadel before 4.16.2 contains a server-side request forgery
vulnerabi ...)
- TODO: check
+ NOT-FOR-US: ZITADEL
CVE-2026-105213 (ZITADEL 4.x before 4.17.1 does not check an organization's
inactive st ...)
- TODO: check
+ NOT-FOR-US: ZITADEL
CVE-2026-105212 (ZITADEL 3.x before 3.4.14 and 4.x before 4.16.2 contains an
authentica ...)
- TODO: check
+ NOT-FOR-US: ZITADEL
CVE-2026-105211 (ZITADEL before 4.17.1 contains an authentication bypass
vulnerability ...)
- TODO: check
+ NOT-FOR-US: ZITADEL
CVE-2026-105210 (ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains a
missing aut ...)
- TODO: check
+ NOT-FOR-US: ZITADEL
CVE-2026-105209 (ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains an
improper a ...)
- TODO: check
+ NOT-FOR-US: ZITADEL
CVE-2026-105208 (ZITADEL 4.x before 4.17.3 and 3.x through 3.4.15 protects IdP
intent t ...)
- TODO: check
+ NOT-FOR-US: ZITADEL
CVE-2026-105207 (ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.17.3 creates
links bet ...)
- TODO: check
+ NOT-FOR-US: ZITADEL
CVE-2026-105206 (ZITADEL 3.0.0 through 3.4.15 and 4.x before 4.17.3 contains
an incorre ...)
- TODO: check
+ NOT-FOR-US: ZITADEL
CVE-2026-105205 (SiYuan before 3.8.5 contains an information disclosure
vulnerability t ...)
NOT-FOR-US: SiYuan
CVE-2026-105161 (A flaw has been found in invariant-systems-ai aiir up to
1.7.0. The af ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0f43d6a5ae9e4c74ca2133d79bb346effa8233b1
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0f43d6a5ae9e4c74ca2133d79bb346effa8233b1
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
