Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
91ca7a89 by Salvatore Bonaccorso at 2026-10-06T22:12:36+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -837,55 +837,55 @@ CVE-2026-106121 (The RabbitMQ Java client library allows
Java and JVM-based appl
NOTE: https://github.com/rabbitmq/rabbitmq-java-client/pull/2100
NOTE: Fixed by:
https://github.com/rabbitmq/rabbitmq-java-client/commit/25fad817291feff3195c32620117d295598f8b41
(v5.37.0)
CVE-2026-106120 (LiquidJS is a Shopify / GitHub Pages compatible template
engine in pur ...)
- TODO: check
+ NOT-FOR-US: LiquidJS
CVE-2026-106119 (LangChain is a framework for building LLM-powered
applications. Prior ...)
- TODO: check
+ NOT-FOR-US: LangChain
CVE-2026-106118 (ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1,
tiled TIF ...)
- TODO: check
+ NOT-FOR-US: ImageSharp
CVE-2026-106117 (ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1,
decoding ...)
- TODO: check
+ NOT-FOR-US: ImageSharp
CVE-2026-106116 (ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2,
ExifReade ...)
- TODO: check
+ NOT-FOR-US: ImageSharp
CVE-2026-106115 (ImageSharp is a 2D graphics library. From 2.1.0 until 4.1.2,
the TIFF ...)
- TODO: check
+ NOT-FOR-US: ImageSharp
CVE-2026-106114 (ImageSharp is a 2D graphics library. From 1.0.0-beta0001
until 4.1.2, ...)
- TODO: check
+ NOT-FOR-US: ImageSharp
CVE-2026-106113 (ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2,
decoding ...)
- TODO: check
+ NOT-FOR-US: ImageSharp
CVE-2026-106112 (ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2,
ICC LUT16 ...)
- TODO: check
+ NOT-FOR-US: ImageSharp
CVE-2026-106111 (ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2,
ExrBaseDe ...)
- TODO: check
+ NOT-FOR-US: ImageSharp
CVE-2026-106110 (ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2,
the TIFF ...)
- TODO: check
+ NOT-FOR-US: ImageSharp
CVE-2026-106109 (Quasar Framework is a framework for building high-performance
Vue.js u ...)
- TODO: check
+ NOT-FOR-US: Quasar Framework
CVE-2026-106107 (Quasar Framework is a framework for building high-performance
Vue.js u ...)
- TODO: check
+ NOT-FOR-US: Quasar Framework
CVE-2026-106106 (Quasar Framework is a framework for building high-performance
Vue.js u ...)
- TODO: check
+ NOT-FOR-US: Quasar Framework
CVE-2026-106105 (Quasar Framework is a framework for building high-performance
Vue.js u ...)
- TODO: check
+ NOT-FOR-US: Quasar Framework
CVE-2026-106104 (Quasar Framework is a framework for building high-performance
Vue.js u ...)
- TODO: check
+ NOT-FOR-US: Quasar Framework
CVE-2026-106103 (Quasar Framework is a framework for building high-performance
Vue.js u ...)
- TODO: check
+ NOT-FOR-US: Quasar Framework
CVE-2026-106102 (Quasar Framework is a framework for building high-performance
Vue.js u ...)
- TODO: check
+ NOT-FOR-US: Quasar Framework
CVE-2026-106101 (Quasar Framework is a framework for building high-performance
Vue.js u ...)
- TODO: check
+ NOT-FOR-US: Quasar Framework
CVE-2026-106100 (Payload is a free and open source headless content management
system. ...)
- TODO: check
+ NOT-FOR-US: Payload CMS
CVE-2026-106041 (Mooncake Store master through 0.3.13.post1 contains a missing
authoriz ...)
- TODO: check
+ NOT-FOR-US: Mooncake Store
CVE-2026-106040 (Mooncake Store master through 0.3.13.post1 contains a missing
authoriz ...)
- TODO: check
+ NOT-FOR-US: Mooncake Store
CVE-2026-106039 (Mooncake Store master through 0.3.13.post1 contains a missing
authoriz ...)
- TODO: check
+ NOT-FOR-US: Mooncake Store
CVE-2026-106038 (Mooncake Store master through 0.3.13.post1 contains a missing
authenti ...)
- TODO: check
+ NOT-FOR-US: Mooncake Store
CVE-2026-106037 (Mooncake through 0.3.13.post1 contains a missing
authentication vulner ...)
- TODO: check
+ NOT-FOR-US: Mooncake
CVE-2026-106033 (A DOM-based Cross-Site Scripting (XSS) vulnerability exists
in the Ans ...)
TODO: check
CVE-2026-106026 (tftp-hpa 5.4 before 6.0 contains an out-of-bounds read
vulnerability i ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/91ca7a89134461b2da62556cf626d2140619ae67
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/91ca7a89134461b2da62556cf626d2140619ae67
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
