Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e5fcac34 by Salvatore Bonaccorso at 2026-10-05T09:34:45+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -78,43 +78,43 @@ CVE-2026-105302 (A flaw was found in the User Session Note
mapper of the Keycloa
CVE-2026-105301 (A flaw was found in the X.509 client-certificate
authenticator of Keyc ...)
- keycloak <itp> (bug #1088287)
CVE-2026-105295 (GitAhead 2.5.0 through 2.7.1 contains an insecure update
mechanism tha ...)
- TODO: check
+ NOT-FOR-US: GitAhead
CVE-2026-105294 (Legcord 1.1.0 through 1.3.0 contains a configuration
injection vulnera ...)
- TODO: check
+ NOT-FOR-US: Legcord
CVE-2026-105293 (Legcord 1.1.0 through 1.3.0 contains a path traversal
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Legcord
CVE-2026-105292 (Chaterm before 0.12.1 contains a login cross-site request
forgery vuln ...)
- TODO: check
+ NOT-FOR-US: Chaterm
CVE-2026-105246 (A vulnerability was found in SourceCodester Online Reviewer
Management ...)
NOT-FOR-US: SourceCodester
CVE-2026-105245 (A vulnerability has been found in sgl-project sglang up to
0.5.21. Thi ...)
- TODO: check
+ NOT-FOR-US: sgl-project sglang
CVE-2026-105238 (A flaw has been found in ChatGPTNextWeb NextChat up to
2.16.1. This vu ...)
- TODO: check
+ NOT-FOR-US: ChatGPTNextWeb NextChat
CVE-2026-105237 (A vulnerability was detected in linlinjava litemall up to
1.8.0. This ...)
- TODO: check
+ NOT-FOR-US: linlinjava litemall
CVE-2026-105233 (A vulnerability has been found in kishor-23
food-waste-management-syst ...)
- TODO: check
+ NOT-FOR-US: kishor-23 food-waste-management-system
CVE-2026-105232 (A flaw has been found in kishor-23
food-waste-management-system 411989 ...)
- TODO: check
+ NOT-FOR-US: kishor-23 food-waste-management-system
CVE-2026-105231 (A vulnerability was detected in kishor-23
food-waste-management-system ...)
- TODO: check
+ NOT-FOR-US: kishor-23 food-waste-management-system
CVE-2026-105230 (A security vulnerability has been detected in kishor-23
food-waste-man ...)
- TODO: check
+ NOT-FOR-US: kishor-23 food-waste-management-system
CVE-2026-105229 (A weakness has been identified in kishor-23
food-waste-management-syst ...)
- TODO: check
+ NOT-FOR-US: kishor-23 food-waste-management-system
CVE-2026-105226 (A security flaw has been discovered in osCommerce osCommerce2
up to 2. ...)
- TODO: check
+ NOT-FOR-US: osCommerce osCommerce2
CVE-2026-105225 (A vulnerability was identified in osCommerce osCommerce2 up
to 2.3.4.1 ...)
- TODO: check
+ NOT-FOR-US: osCommerce osCommerce2
CVE-2026-105223 (maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS
certificate ...)
- TODO: check
+ NOT-FOR-US: maclof kubernetes-client
CVE-2026-105222 (The alexpechkarev/google-maps Laravel package through 12.16
disables T ...)
- TODO: check
+ NOT-FOR-US: alexpechkarev/google-maps Laravel package
CVE-2026-105221 (The gist RubyGem before 6.1.0 contains an improper
certificate validat ...)
- TODO: check
+ NOT-FOR-US: gist RubyGem
CVE-2026-105220 (Twine 2 desktop through 2.12.0 contains a cross-site
scripting vulnera ...)
- TODO: check
+ NOT-FOR-US: Twine 2 desktop
CVE-2026-105188 (A vulnerability was found in code-projects Human Resource
Management S ...)
NOT-FOR-US: code-projects
CVE-2026-105187 (A vulnerability has been found in itsourcecode Online
Admission System ...)
@@ -132,7 +132,7 @@ CVE-2026-105182 (A security flaw has been discovered in
SourceCodester Online Re
CVE-2026-105181 (A vulnerability was identified in itsourcecode Online
Admission System ...)
NOT-FOR-US: itsourcecode System
CVE-2026-105180 (A vulnerability was determined in Jeebase 0.0.1. This
vulnerability af ...)
- TODO: check
+ NOT-FOR-US: Jeebase
CVE-2026-105179 (A weakness has been identified in SourceCodester Drug
Recommendation S ...)
NOT-FOR-US: SourceCodester
CVE-2026-105178 (A security flaw has been discovered in SourceCodester Drug
Recommendat ...)
@@ -144,31 +144,31 @@ CVE-2026-105176 (A vulnerability was determined in
SourceCodester Drug Recommend
CVE-2026-105175 (A vulnerability was found in SourceCodester Drug
Recommendation System ...)
NOT-FOR-US: SourceCodester
CVE-2026-105174 (A vulnerability has been found in Gerapy up to 0.9.13. This
vulnerabil ...)
- TODO: check
+ NOT-FOR-US: Gerapy
CVE-2026-105173 (A flaw has been found in code-projects Human Resource
Management 1.0. ...)
NOT-FOR-US: code-projects
CVE-2026-105172 (A vulnerability was detected in itsourcecode Online Admission
System 1 ...)
NOT-FOR-US: itsourcecode System
CVE-2026-105171 (A security vulnerability has been detected in kishor-23
food-waste-man ...)
- TODO: check
+ NOT-FOR-US: kishor-23 food-waste-management-system
CVE-2026-105170 (A weakness has been identified in kishor-23
food-waste-management-syst ...)
- TODO: check
+ NOT-FOR-US: kishor-23 food-waste-management-system
CVE-2026-105169 (A security flaw has been discovered in kishor-23
food-waste-management ...)
- TODO: check
+ NOT-FOR-US: kishor-23 food-waste-management-system
CVE-2026-105168 (A vulnerability was identified in kishor-23
food-waste-management-syst ...)
- TODO: check
+ NOT-FOR-US: kishor-23 food-waste-management-system
CVE-2026-105167 (A vulnerability was determined in kishor-23
food-waste-management-syst ...)
- TODO: check
+ NOT-FOR-US: kishor-23 food-waste-management-system
CVE-2026-105166 (A vulnerability was found in kishor-23
food-waste-management-system 41 ...)
- TODO: check
+ NOT-FOR-US: kishor-23 food-waste-management-system
CVE-2026-105165 (A vulnerability has been found in devopspolis
secrets-replicator up to ...)
- TODO: check
+ NOT-FOR-US: devopspolis secrets-replicator
CVE-2026-105164 (A flaw has been found in NASA cFS up to 7.0.1. This issue
affects the ...)
- TODO: check
+ NOT-FOR-US: NASA cFS
CVE-2026-105163 (A vulnerability was detected in crossplane crossplane-runtime
up to 2. ...)
- TODO: check
+ NOT-FOR-US: crossplane crossplane-runtime
CVE-2026-100727 (An improper access control vulnerability exists in GROWI,
which allow ...)
- TODO: check
+ NOT-FOR-US: GROWI
CVE-2019-25777 (YAML versions before 1.27_001 for Perl allow a loaded
perl/glob docume ...)
- libyaml-perl 1.29-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44090805/
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e5fcac3407cabb14fbd9b8edc8acf521aa89a2e0
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e5fcac3407cabb14fbd9b8edc8acf521aa89a2e0
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
