Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
6d2b0642 by Salvatore Bonaccorso at 2026-10-17T14:07:03+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3055,65 +3055,65 @@ CVE-2026-110638 (doc-recog through 1.1.6 contains an OS
command injection vulner
CVE-2026-110637 (buildebooks before 0.2.2 contains an OS command injection
vulnerabilit ...)
NOT-FOR-US: buildebooks
CVE-2026-110636 (pypdftk through 0.5 contains an OS command injection
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: pypdftk
CVE-2026-110635 (webp-converter before 3.0.0 contains an OS command injection
vulnerabi ...)
- TODO: check
+ NOT-FOR-US: webp-converter
CVE-2026-110634 (git-diff before 2.0.7 contains an OS command injection
vulnerability t ...)
- TODO: check
+ NOT-FOR-US: danday74/git-diff
CVE-2026-110633 (MyReport Updater through 2.1.1 contains a local privilege
escalation v ...)
- TODO: check
+ NOT-FOR-US: MyReport Updater
CVE-2026-110632 (Report One MyReport Updater through 2.1.1 exposes an
unauthenticated g ...)
- TODO: check
+ NOT-FOR-US: MyReport Updater
CVE-2026-110631 (Komodo through 2.3.3 contains an authentication bypass
vulnerability i ...)
- TODO: check
+ NOT-FOR-US: Komodo
CVE-2026-110630 (VentureDrake Laravel CRM before 2.4.0 contains an incorrect
authorizat ...)
- TODO: check
+ NOT-FOR-US: VentureDrake Laravel CRM
CVE-2026-110629 (VentureDrake Laravel CRM before 2.4.0 contains a missing
authorization ...)
- TODO: check
+ NOT-FOR-US: VentureDrake Laravel CRM
CVE-2026-110628 (Kan 0.5.5 through 0.6.0 contains an unauthenticated
server-side reques ...)
- TODO: check
+ NOT-FOR-US: Kan
CVE-2026-110627 (ClipBucket v5 through 5.5.3-#206 contains a reflected
cross-site scrip ...)
- TODO: check
+ NOT-FOR-US: ClipBucket
CVE-2026-110626 (ClipBucket v5 through 5.5.3-#206 contains a reflected
cross-site scrip ...)
- TODO: check
+ NOT-FOR-US: ClipBucket
CVE-2026-110625 (ClipBucket v5 through 5.5.3-#206 contains a reflected
cross-site scrip ...)
- TODO: check
+ NOT-FOR-US: ClipBucket
CVE-2026-110624 (Papermerge Core through 3.5.3 contains a missing
authorization vulnera ...)
- TODO: check
+ NOT-FOR-US: Papermerge Core
CVE-2026-110623 (Papermerge Core through 3.5.3 contains a missing
authorization vulnera ...)
- TODO: check
+ NOT-FOR-US: Papermerge Core
CVE-2026-110622 (Papermerge Core through 3.5.3 contains a missing
authorization vulnera ...)
- TODO: check
+ NOT-FOR-US: Papermerge Core
CVE-2026-110621 (Swetrix Cloud before 5.1.0 contains a missing authorization
vulnerabil ...)
- TODO: check
+ NOT-FOR-US: Swetrix Cloud
CVE-2026-110620 (Formbricks before 4.9.0 contains an authorization bypass
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Formbricks
CVE-2026-110619 (frp 0.41.0 through 0.71.1 contains a missing authentication
vulnerabil ...)
- TODO: check
+ NOT-FOR-US: frp
CVE-2026-110618 (SmsForwarder through 3.5.0 contains a missing authentication
vulnerabi ...)
- TODO: check
+ NOT-FOR-US: SmsForwarder
CVE-2026-110617 (we-mp-rss through 1.5.3 contains a missing authorization
vulnerability ...)
- TODO: check
+ NOT-FOR-US: we-mp-rss
CVE-2026-110616 (NullHub through 2026.5.29 contains a missing authentication
vulnerabil ...)
- TODO: check
+ NOT-FOR-US: NullHub
CVE-2026-110615 (jshERP through 3.6 contains a missing authorization
vulnerability in t ...)
- TODO: check
+ NOT-FOR-US: jshERP
CVE-2026-110614 (Yiuman citrus through 0.15.0 contains an ORDER BY sql
injection vulner ...)
- TODO: check
+ NOT-FOR-US: Yiuman citrus
CVE-2026-110613 (youlai-mall through commit 9f62de8 contains a missing
authorization vu ...)
- TODO: check
+ NOT-FOR-US: youlai-mall
CVE-2026-110612 (vlife through 2.0.1 contains an authentication bypass
vulnerability th ...)
- TODO: check
+ NOT-FOR-US: vlife
CVE-2026-110611 (REBUILD through 4.5.0 contains an authorization bypass
vulnerability i ...)
- TODO: check
+ NOT-FOR-US: REBUILD
CVE-2026-110610 (ruoyi-vue-pro through 2026.09 contains a server-side request
forgery v ...)
- TODO: check
+ NOT-FOR-US: ruoyi-vue-pro
CVE-2026-110609 (Dromara Skyeye through commit 65d3ddcede70 contains an sql
injection v ...)
- TODO: check
+ NOT-FOR-US: Dromara Skyeye
CVE-2026-110608 (BizSpring Shop through commit cf22d39daaf1 contains an
insecure direct ...)
- TODO: check
+ NOT-FOR-US: BizSpring Shop
CVE-2026-110607 (BizSpring Shop through commit cf22d39daaf1 contains a payment
verifica ...)
- TODO: check
+ NOT-FOR-US: BizSpring Shop
CVE-2026-110606 (LibreCAD libdxfrw through LC2.2.0 (LibreCAD through 2.2.1.5)
contains ...)
TODO: check
CVE-2026-110605 (libschrift through 0.10.2 contains a divide by zero
vulnerability that ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6d2b064278f053cc61a6d86f9c26f486e952983d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6d2b064278f053cc61a6d86f9c26f486e952983d
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
