Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2f37b491 by Salvatore Bonaccorso at 2026-10-16T09:58:21+02:00
Process some new NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -75,7 +75,7 @@ CVE-2026-5819
CVE-2026-45165 (An authorization flaw in Idira Conjur version 13.9.0 allows an
authent ...)
NOT-FOR-US: Palo Alto Networks
CVE-2026-36436 (An issue in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP
credenti ...)
- TODO: check
+ NOT-FOR-US: Trisolutions BRPerfX
CVE-2026-2937
REJECTED
CVE-2026-19867 (Mattermost versions 11.10.x <= 11.10.0, 11.9.x <= 11.9.1,
11.8.x <= 11 ...)
@@ -103,39 +103,39 @@ CVE-2026-12272 (The Lightweight Cookie Notice \u2013
Cookie Banner for Cookie Co
CVE-2026-111458 (The fanx_fingerprint function in ssl/sslxprint.c of ssldump
allocates ...)
TODO: check
CVE-2026-111451 (Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or
escapes cal ...)
- TODO: check
+ NOT-FOR-US: Wheels
CVE-2026-111450 (Wheels through 4.1.1 derives its default production
error-email addres ...)
- TODO: check
+ NOT-FOR-US: Wheels
CVE-2026-111449 (Wheels 3.0.0 through 4.1.1 can disclose detailed exceptions
when allow ...)
- TODO: check
+ NOT-FOR-US: Wheels
CVE-2026-111448 (Wheels 4.0.0 through 4.1.2 uses case-insensitive comparisons
in path-c ...)
- TODO: check
+ NOT-FOR-US: Wheels
CVE-2026-111447 (Wheels 1.1 through 4.1.2 resolves nestedProperties() records
by posted ...)
- TODO: check
+ NOT-FOR-US: Wheels
CVE-2026-111446 (Wheels 4.0.0 through 4.1.2 exposes password-less development
tools und ...)
- TODO: check
+ NOT-FOR-US: Wheels
CVE-2026-111445 (Wheels 4.0.0 through 4.1.2 before 4.2.0 replaces incoming
scope condit ...)
- TODO: check
+ NOT-FOR-US: Wheels
CVE-2026-111444 (Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB
with backsl ...)
- TODO: check
+ NOT-FOR-US: Wheels
CVE-2026-111443 (Wheels 4.0.6 through 4.1.2 lets an unauthenticated client
switch a req ...)
- TODO: check
+ NOT-FOR-US: Wheels
CVE-2026-111442 (Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before
1.34.6 does n ...)
- TODO: check
+ NOT-FOR-US: Backdrop CMS
CVE-2026-111389 (Frappe HRMS 14.x before 14.38.2, 15.x before 15.64.0, and
16.x before ...)
NOT-FOR-US: Frappe
CVE-2026-111388 (Frappe Framework before 15.120.0 and 16.x before 16.33.0 does
not enfo ...)
NOT-FOR-US: Frappe
CVE-2026-111387 (Nezha from 2.2.5 before 2.3.15 contains an information
disclosure vuln ...)
- TODO: check
+ NOT-FOR-US: Nezha
CVE-2026-111386 (Nezha from 1.7.0 before 2.3.15 contains an information
disclosure vuln ...)
- TODO: check
+ NOT-FOR-US: Nezha
CVE-2026-111385 (Nezha from 2.1.0 before 2.3.15 contains a host header
injection vulner ...)
- TODO: check
+ NOT-FOR-US: Nezha
CVE-2026-111384 (Nezha 1.0.0 before 2.3.15 contains a memory exhaustion
vulnerability i ...)
- TODO: check
+ NOT-FOR-US: Nezha
CVE-2026-111383 (Nezha from 2.0.13 before 2.3.15 contains a resource
exhaustion vulnera ...)
- TODO: check
+ NOT-FOR-US: Nezha
CVE-2026-111369 (ClassroomIO through 1.0.0 contains an incorrect authorization
vulnerab ...)
TODO: check
CVE-2026-111368 (ClassroomIO through 1.0.0 contains an insecure direct object
reference ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2f37b491473d5858679e960bc92b681c0ef9f94e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2f37b491473d5858679e960bc92b681c0ef9f94e
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
