Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
6c4cd113 by security tracker role at 2026-10-05T19:14:56+00:00
automatic NOT-FOR-US entries update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,25 +1,25 @@
 CVE-2026-97309 (Missing Authorization vulnerability in Webful Creations 
RepairBuddy co ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-97305 (Authorization Bypass Through User-Controlled Key vulnerability 
in Them ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-97304 (Missing Authorization vulnerability in Arraytics Timetics 
timetics all ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-97303 (Missing Authorization vulnerability in Apps Mav Scratch & Win 
\u2013 G ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-97283 (Deserialization of Untrusted Data vulnerability in Liquid Web 
/ Stella ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-97275 (Improper Validation of Specified Quantity in Input 
vulnerability in Vi ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-97071 (Incorrect Calculation vulnerability in VillaTheme CURCY 
woo-multi-curr ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-97070 (Authorization Bypass Through User-Controlled Key vulnerability 
in Cozy ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-95166 (In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the 
LabelFormat fi ...)
        TODO: check
 CVE-2026-95165 (Bacularis 5.4.0 - 6.5.1 is vulnerable to Cross Site Scripting 
(XSS) in ...)
        TODO: check
 CVE-2026-94669 (Missing Authorization vulnerability in WP ManageNinja LLC 
Fluent Forms ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-93323 (The Dockerfile frontend loaded the Dockerfile and 
.dockerignore files  ...)
        TODO: check
 CVE-2026-93322 (A malicious frontend can submit an LLB definition that causes 
buildkit ...)
@@ -35,9 +35,9 @@ CVE-2026-93317 (An unauthenticated attacker controlling a 
registry or OCI-layout
 CVE-2026-93316 (If BuildKit daemon is started with --cdi-disabled it can lead 
to daemo ...)
        TODO: check
 CVE-2026-92931 (CWE-918: Server-Side Request Forgery in the Progress 
@progress/sitefin ...)
-       TODO: check
+       NOT-FOR-US: Progress Software
 CVE-2026-89039 (The convert_playwright_script prompt in the k6 MCP server 
accepts a fi ...)
-       TODO: check
+       NOT-FOR-US: Grafana
 CVE-2026-88424 (FineAdmin v1.0 was discovered to contain a SQL injection 
vulnerability ...)
        TODO: check
 CVE-2026-88397 (ApiAdmin v.5.0 and before is vulnerable to SQL Injection in 
the user-l ...)
@@ -55,23 +55,23 @@ CVE-2026-88392 (Unimall v4 is vulnerable to Directory 
Traversal in FileUploadCon
 CVE-2026-88391 (Northstar (dromara/northstar, quantitative trading platform) 
<= 9.1.1  ...)
        TODO: check
 CVE-2026-86671 (In Eclipse Che versions 7.29.0 and later, the GET 
`/api/scm/resolve` a ...)
-       TODO: check
+       NOT-FOR-US: Eclipse
 CVE-2026-79820 (A remote user validation failure vulnerability exists in HPE 
Integrate ...)
-       TODO: check
+       NOT-FOR-US: HPE
 CVE-2026-78413 (Velociraptor allows collection of VQL queries packaged into 
Artifacts  ...)
-       TODO: check
+       NOT-FOR-US: Rapid7
 CVE-2026-78412 (Velociraptor's WatchEvent gRPC API can specify the OrgId of 
the org fr ...)
-       TODO: check
+       NOT-FOR-US: Rapid7
 CVE-2026-78411 (Velociraptor's SetClientMetadata used the wrong permission 
check to en ...)
-       TODO: check
+       NOT-FOR-US: Rapid7
 CVE-2026-77805 (In Progress\xae Telerik\xae Fiddler\xae Classic for Windows, 
versions  ...)
-       TODO: check
+       NOT-FOR-US: Progress Software
 CVE-2026-77804 (In Progress\xae Telerik\xae Fiddler\xae Classic for Windows, 
versions  ...)
-       TODO: check
+       NOT-FOR-US: Progress Software
 CVE-2026-77803 (In Progress\xae Telerik\xae Fiddler\xae Classic for Windows, 
versions  ...)
-       TODO: check
+       NOT-FOR-US: Progress Software
 CVE-2026-77802 (In Progress\xae Telerik\xae Fiddler\xae Classic for Windows, 
versions  ...)
-       TODO: check
+       NOT-FOR-US: Progress Software
 CVE-2026-59788 (The email media type OAuth form passes the Authorization 
endpoint valu ...)
        TODO: check
 CVE-2026-59787 (The Perl SNMP trap receiver script shipped with Zabbix does 
not proper ...)
@@ -85,73 +85,73 @@ CVE-2026-59783 (The Zabbix Server/Proxy has a vulnerability 
where binary items c
 CVE-2026-59782 (The JavaScript preprocessing (Duktape) engine on Zabbix server 
has a v ...)
        TODO: check
 CVE-2026-58880 (In handle_app_val_response of btif_rc.cc, there is a possible 
way to a ...)
-       TODO: check
+       NOT-FOR-US: Android
 CVE-2026-58865 (In multiple functions of PduParser.java, there is a possible 
persisten ...)
-       TODO: check
+       NOT-FOR-US: Android
 CVE-2026-58859 (In multiple places, there is a possible  denial of service due 
to an u ...)
-       TODO: check
+       NOT-FOR-US: Android
 CVE-2026-58856 (In returnOutputBufferLocked of 
DeprecatedCamera3StreamSplitter.cpp, th ...)
-       TODO: check
+       NOT-FOR-US: Android
 CVE-2026-58854 (In multiple locations, there is a possible memory corruption 
due to ty ...)
-       TODO: check
+       NOT-FOR-US: Android
 CVE-2026-58841 (In multiple functions of VirtualAudioControllerTest.java, 
there is a p ...)
-       TODO: check
+       NOT-FOR-US: Android
 CVE-2026-58835 (In cfg2prop of btif_storage.cc, there is a possible 
out-of-bounds writ ...)
-       TODO: check
+       NOT-FOR-US: Android
 CVE-2026-58834 (In setPermissionGrantState of DevicePolicyManagerService.java, 
there i ...)
-       TODO: check
+       NOT-FOR-US: Android
 CVE-2026-58815 (In multiple locations, there is a possible out of bounds write 
due to  ...)
-       TODO: check
+       NOT-FOR-US: Android
 CVE-2026-55286 (In stpropnci_process of stpropnci.cc, there is a possible out 
of bound ...)
-       TODO: check
+       NOT-FOR-US: Android
 CVE-2026-55280 (In multiple locations, there is a possible out-of-bounds write 
due to  ...)
-       TODO: check
+       NOT-FOR-US: Android
 CVE-2026-55270 (In dialInternal in multiple locations, there is a possible 
permission  ...)
-       TODO: check
+       NOT-FOR-US: Android
 CVE-2026-55269 (In FilterCapturedPacket of snoop_logger.cc, there is a 
possible memory ...)
-       TODO: check
+       NOT-FOR-US: Android
 CVE-2026-55266 (In qsort of libufdt_sysdeps_vendor.c, there is a possible 
out-of-bound ...)
-       TODO: check
+       NOT-FOR-US: Android
 CVE-2026-55265 (In multiple functions of PduParser.java, there is a possible 
out of bo ...)
-       TODO: check
+       NOT-FOR-US: Android
 CVE-2026-49937 (In multiple functions of MessageQueueBase.h, there is a 
possible out o ...)
-       TODO: check
+       NOT-FOR-US: Android
 CVE-2026-49933 (In handle_le_monitor_device_event of msft.cc, there is a 
possible cont ...)
-       TODO: check
+       NOT-FOR-US: Android
 CVE-2026-49885 (In rw_t4t_update_file of rw_t4t.cc, there is a possible 
out-of-bounds  ...)
-       TODO: check
+       NOT-FOR-US: Android
 CVE-2026-49880 (In multiple functions of nfa_nfcee_act.cc, there is a possible 
out-of- ...)
-       TODO: check
+       NOT-FOR-US: Android
 CVE-2026-49878 (In wpas_handle_robust_av_scs_recv_action of robust_av.c, there 
is a po ...)
-       TODO: check
+       NOT-FOR-US: Android
 CVE-2026-45524 (In isSystem of WifiPermissionsUtil.java, there is a possible 
sandbox e ...)
-       TODO: check
+       NOT-FOR-US: Android
 CVE-2026-42700 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-39783 (Missing Authorization vulnerability in WP SYNTEX Polylang 
polylang all ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-39763 (Missing Authorization vulnerability in Deepak Anand WP Dummy 
Content G ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-39721 (Missing Authorization vulnerability in Brainstorm Force 
Starter Templa ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-37719 (An issue in dormakaba evolo Service (all versions) allows a 
remote att ...)
        TODO: check
 CVE-2026-28667 (In multiple functions of rw_t5t.cc, there is a possible 
out-of-bounds  ...)
-       TODO: check
+       NOT-FOR-US: Android
 CVE-2026-28648 (In Settings, there is a possible permission bypass due to a 
confused d ...)
-       TODO: check
+       NOT-FOR-US: Android
 CVE-2026-28647 (In updateState of DeviceAdminAppsPreferenceController.java, 
there is a ...)
-       TODO: check
+       NOT-FOR-US: Android
 CVE-2026-28641 (In shouldDisableUninstallButton of 
ApplicationActionButtonsPreferenceC ...)
-       TODO: check
+       NOT-FOR-US: Android
 CVE-2026-28640 (In checkCallerIsCertInstallerOrSelfInProfile of 
CredentialStorageActiv ...)
-       TODO: check
+       NOT-FOR-US: Android
 CVE-2026-28625 (In multiple locations, there is a possible permission bypass 
due to a  ...)
-       TODO: check
+       NOT-FOR-US: Android
 CVE-2026-19185 (The system-call verifier for i3c_do_ccc() in 
drivers/i3c/i3c_handlers. ...)
-       TODO: check
+       NOT-FOR-US: Zephyr, different from src:zephyr
 CVE-2026-19184 (The NXP GAU ADC driver (drivers/adc/adc_mcux_gau_adc.c) 
validated the  ...)
-       TODO: check
+       NOT-FOR-US: Zephyr, different from src:zephyr
 CVE-2026-12171 (auto-changelog before 2.6.1 merges configuration from inside 
the targe ...)
        TODO: check
 CVE-2026-105712 (gpgtar in GnuPG before 2.5.19 can allow file overwrite via 
crafted dat ...)
@@ -195,7 +195,7 @@ CVE-2026-105629 (Plane is an open-source project management 
tool. Prior to 1.4.0
 CVE-2026-105628 (Plane is an open-source project management tool. Prior to 
1.4.0, Plane ...)
        TODO: check
 CVE-2026-105421 (Missing Authorization vulnerability in Kit Kit (formerly 
ConvertKit) f ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-105397 (LearnPress plugin for WordPress through 4.4.9.1 contains a 
stored cros ...)
        TODO: check
 CVE-2026-105396 (Heym before v0.0.112 contains a token leakage vulnerability 
in build_p ...)
@@ -233,17 +233,17 @@ CVE-2026-105288 (A vulnerability has been found in 
feelec-yishu feelcrm-os 1.0.0
 CVE-2026-105287 (A flaw has been found in feelec-yishu feelcrm-os 1.0.0. 
Affected is an ...)
        TODO: check
 CVE-2026-105286 (A vulnerability was detected in Totolink A3002MU 
1.0.0-B20230403.1455. ...)
-       TODO: check
+       NOT-FOR-US: TOTOLINK
 CVE-2026-105285 (A security vulnerability has been detected in Totolink 
A3002MU 1.0.0-B ...)
-       TODO: check
+       NOT-FOR-US: TOTOLINK
 CVE-2026-105284 (A weakness has been identified in Totolink A3002MU 
1.0.0-B20230403.145 ...)
-       TODO: check
+       NOT-FOR-US: TOTOLINK
 CVE-2026-105263 (A security flaw has been discovered in Shaarli up to 0.16.3. 
The affec ...)
        TODO: check
 CVE-2026-105254 (A vulnerability was identified in itsourcecode Online 
Admission System ...)
-       TODO: check
+       NOT-FOR-US: itsourcecode System
 CVE-2026-105253 (A vulnerability was determined in itsourcecode Online 
Admission System ...)
-       TODO: check
+       NOT-FOR-US: itsourcecode System
 CVE-2026-105251 (A vulnerability was detected in vgmstream up to r2117. 
Affected by thi ...)
        TODO: check
 CVE-2026-105250 (A security vulnerability has been detected in vgmstream up to 
r2117. A ...)
@@ -253,23 +253,23 @@ CVE-2026-105249 (A weakness has been identified in 
vgmstream up to r2117. This i
 CVE-2026-105248 (A security flaw has been discovered in vgmstream up to r2117. 
This aff ...)
        TODO: check
 CVE-2026-105247 (A vulnerability was determined in SourceCodester Online 
Reviewer Manag ...)
-       TODO: check
+       NOT-FOR-US: SourceCodester
 CVE-2026-105073 (Exposure of Sensitive System Information to an Unauthorized 
Control Sp ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-105069 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-105068 (Insertion of Sensitive Information Into Sent Data 
vulnerability in Pix ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-105064 (Use of Externally-Controlled Input to Select Classes or Code 
('Unsafe  ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-105062 (Missing Authorization vulnerability in Brandtoss WP Admin 
Audit wp-adm ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-105060 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-105056 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-105055 (Missing Authorization vulnerability in WP Mailster WP 
Mailster wp-mail ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-104979 (Plane is an open-source project management tool. Prior to 
1.4.0, Intak ...)
        TODO: check
 CVE-2026-104978 (Plane is an open-source project management tool. Prior to 
1.4.0, Plane ...)
@@ -339,43 +339,43 @@ CVE-2026-104806 (DigitalCanion has discovered a path 
traversal vulnerability tha
 CVE-2026-104805 (DigitalCanion has discovered a vulnerability in the backup 
restoration ...)
        TODO: check
 CVE-2026-104714 (Concurrent execution using shared resource with improper 
synchronizati ...)
-       TODO: check
+       NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-104713 (Allocation of resources without limits or throttling 
vulnerability in  ...)
-       TODO: check
+       NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-104712 (Asymmetric resource consumption (amplification) vulnerability 
in Apach ...)
-       TODO: check
+       NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-104711 (Improper neutralization of special elements used in an 
expression lang ...)
-       TODO: check
+       NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-104706 (DigitalCanion has discovered a path traversal vulnerability 
that allow ...)
        TODO: check
 CVE-2026-104675 (Missing Authorization vulnerability in Liquid Web / StellarWP 
Event Ti ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-104673 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-104409 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-104408 (Improper Neutralization of Special Elements used in an SQL 
Command ('S ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-104407 (Cross-Site Request Forgery (CSRF) vulnerability in Blubrry 
Podcasting  ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-104404 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-104401 (Exposure of Sensitive System Information to an Unauthorized 
Control Sp ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-104400 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-104397 (Missing Authorization vulnerability in Jeroen Peters Name 
Directory na ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-104396 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-104389 (Improper Neutralization of Special Elements used in an SQL 
Command ('S ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-104388 (Missing Authorization vulnerability in Blubrry Podcasting 
PowerPress P ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-104386 (Missing Authorization vulnerability in WPFunnels Team WP VR 
wpvr allow ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-103684 (Missing Authorization vulnerability in Arraytics WP Event 
Solution wp- ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-103512 (Perforce P4 Search prior to 2026.4.2 trusts a client-supplied 
address  ...)
        TODO: check
 CVE-2026-103511 (Perforce P4 Search prior to 2026.4.2 does notvalidatefile 
names suppli ...)
@@ -385,49 +385,49 @@ CVE-2026-103510 (P4 Search prior to 2026.4.2 does not 
fail securely when its ser
 CVE-2026-103507 (Perforce P4 Search prior to 2026.4.2 does not restrict file 
paths writ ...)
        TODO: check
 CVE-2026-103352 (Improper Neutralization of Special Elements used in an SQL 
Command ('S ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-103351 (Improper Validation of Specified Quantity in Input 
vulnerability in Ma ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-103349 (Deserialization of Untrusted Data vulnerability in Rymera Web 
Co Produ ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-103335 (Insertion of Sensitive Information Into Sent Data 
vulnerability in Dee ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-103334 (Insertion of Sensitive Information Into Sent Data 
vulnerability in Eto ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-103086 (Missing Authorization vulnerability in Stiofan UsersWP 
userswp allows  ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-103085 (Improper Access Control vulnerability in WP User Manager WP 
User Manag ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-103084 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-103079 (Authorization Bypass Through User-Controlled Key 
vulnerability in Ahma ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-103078 (Authorization Bypass Through User-Controlled Key 
vulnerability in Ahma ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-102914 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-102780 (Joomla Extension - joomlafry.com - Unauthenticated 
cross-record public ...)
-       TODO: check
+       NOT-FOR-US: Joomla
 CVE-2026-102779 (Joomla Extension - joomlafry.com - Unauthenticated forced 
execution of ...)
-       TODO: check
+       NOT-FOR-US: Joomla
 CVE-2026-102778 (Joomla Extension - svenbluege.de - Cross-site scripting and 
open redir ...)
-       TODO: check
+       NOT-FOR-US: Joomla
 CVE-2026-102777 (Joomla Extension - svenbluege.de - Server-side request 
forgery in the  ...)
-       TODO: check
+       NOT-FOR-US: Joomla
 CVE-2026-102776 (Joomla Extension - svenbluege.de - Cross-site request forgery 
of list  ...)
-       TODO: check
+       NOT-FOR-US: Joomla
 CVE-2026-102775 (Joomla Extension - phoca.cz - Authorisation bypass through 
user-contro ...)
-       TODO: check
+       NOT-FOR-US: Joomla
 CVE-2026-102576 (A flaw was found in Quay. A remote attacker could trick a 
user into lo ...)
        TODO: check
 CVE-2026-102428 (Joomla Extension - ordasoft.com - Unauthenticated SQL 
injection in Ord ...)
-       TODO: check
+       NOT-FOR-US: Joomla
 CVE-2026-102426 (Joomla Extension - joomshaper.com - Reflected XSS in the 
Dynamic Conte ...)
-       TODO: check
+       NOT-FOR-US: Joomla
 CVE-2026-102393 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-102383 (Missing Authorization vulnerability in VillaTheme Lookzy 
woo-lookbook  ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-102295 (A flaw was found in Quay. A cross-site scripting (XSS) 
vulnerability i ...)
        TODO: check
 CVE-2026-102282 (adm-zip is a JavaScript library for creating and extracting 
ZIP archiv ...)
@@ -435,15 +435,15 @@ CVE-2026-102282 (adm-zip is a JavaScript library for 
creating and extracting ZIP
 CVE-2026-101919 (A flaw was found in the HyperShift operator. The operator 
copies user- ...)
        TODO: check
 CVE-2026-100515 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-100509 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-100103 (Perforce P4 Search container images prior to 2026.4.2 reset 
the servic ...)
        TODO: check
 CVE-2026-100102 (Perforce P4 Search container images prior to 2026.4.2enablean 
unauthen ...)
        TODO: check
 CVE-2025-15643 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin or theme
 CVE-2026-XXXX [OSSN-0112]
        - gnocchi 4.7.0-7 (bug #1150009)
        NOTE: 
https://github.com/gnocchixyz/gnocchi/security/advisories/GHSA-cjq3-6hm7-q33w



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6c4cd113833b86e473a9807ec8c8a64bd71c46bd

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6c4cd113833b86e473a9807ec8c8a64bd71c46bd
You're receiving this email because of your account on salsa.debian.org. Manage 
all notifications: https://salsa.debian.org/-/profile/notifications | Help: 
https://salsa.debian.org/help


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to