Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d5be052b by security tracker role at 2026-10-19T07:15:03+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,39 +1,39 @@
CVE-2026-97859 (Seven Gitea API routes under `/api/v1/users/{username}`
(followers, fo ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as
src:gitea, but never in a stable release)
CVE-2026-97204 (Deleting a label compared the ID of the repository in the
request agai ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as
src:gitea, but never in a stable release)
CVE-2026-94294 (The App Builder WordPress plugin before 5.7.1 does not require
authent ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94273 (The Snap Finance WordPress plugin through 3.11.0 does not
verify that ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94272 (The Snap Finance WordPress plugin before 3.12.0 does not
verify that a ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94231 (The TrueBooker WordPress plugin before 1.3.0 does not have
authorisati ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94230 (The TrueBooker WordPress plugin before 1.3.0 does not have
authorisati ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94229 (The TrueBooker WordPress plugin before 1.3.0 does not verify
that the ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94228 (The TrueBooker WordPress plugin before 1.3.0 does not perform
any capa ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-91831 (The Subscribe to Comments WordPress plugin before 2.3.3 does
not sanit ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-91047 (The ElementsReady Addons for Elementor WordPress plugin
through 6.7.2 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-91046 (The ElementsReady Addons for Elementor WordPress plugin
through 6.7.2 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-89286 (The FormFlow for GoHighLevel (GHL) WordPress plugin through
1.0.0 doe ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-86791 (The iPOSpays Payment Gateway for WooCommerce WordPress plugin
before 1 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-76740 (A security vulnerability in HPE Compute Scale-up Server 3200
and 3250 ...)
- TODO: check
+ NOT-FOR-US: HPE
CVE-2026-76739 (A potential security vulnerability in HPE Compute Scale-up
Server 3200 ...)
- TODO: check
+ NOT-FOR-US: HPE
CVE-2026-74922 (The Document Gallery WordPress plugin through 5.1.1 does not
verify th ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-74921 (The Document Gallery WordPress plugin through 5.1.1 does not
sanitise ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-16487 (A flaw was found in bootc when operating with the default
containers s ...)
TODO: check
CVE-2026-16460 (A flaw was found in bootc and ostree. Already-staged
deployments are f ...)
@@ -47,7 +47,7 @@ CVE-2026-112089 (A security vulnerability has been detected
in Dav-ee dairy-mana
CVE-2026-112088 (A weakness has been identified in Dav-ee
dairy-management-system 31ace ...)
TODO: check
CVE-2026-112087 (A weakness has been identified in itsourcecode Online Cake
Ordering Sy ...)
- TODO: check
+ NOT-FOR-US: itsourcecode System
CVE-2026-112086 (A vulnerability was found in ESPnet up to 202610.post2. This
affects t ...)
TODO: check
CVE-2026-112083 (A security flaw has been discovered in sgl-project SGLang up
to 0.5.19 ...)
@@ -101,7 +101,7 @@ CVE-2026-112033 (A security flaw has been discovered in
aircheng-org iWebShop-5
CVE-2026-112032 (A vulnerability was identified in aircheng-org iWebShop-5 up
to 5.16. ...)
TODO: check
CVE-2026-112031 (A vulnerability was determined in Chamilo LMS up to
1.11.40/2.0.3/3.0. ...)
- TODO: check
+ NOT-FOR-US: Chamilo LMS
CVE-2026-112030 (A vulnerability was found in diem-project diem up to 5.1.3.
This vulne ...)
TODO: check
CVE-2026-112029 (A vulnerability has been found in diem-project diem up to
5.1.3. This ...)
@@ -119,11 +119,11 @@ CVE-2026-111441 (\u5728 openGauss-server \u7684
src/gausskernel/cbb/utils/hll/hl
CVE-2026-111440 (\u5728 openGauss-connector-jdbc \u7684
pgjdbc/src/main/java/org/postgr ...)
TODO: check
CVE-2026-110034 (The Salon Booking System WordPress plugin before 10.31.11
does not enf ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-108984 (A vulnerability is in Web Server default connection ports
under the pr ...)
- TODO: check
+ NOT-FOR-US: GeoVision
CVE-2026-108983 (A vulnerability is in Web Server default connection ports
under the pr ...)
- TODO: check
+ NOT-FOR-US: GeoVision
CVE-2026-108519
REJECTED
CVE-2026-108121 (Brian Mariani from DigitalCanion SA has discovereda
vulnerability in t ...)
@@ -131,15 +131,15 @@ CVE-2026-108121 (Brian Mariani from DigitalCanion SA has
discovereda vulnerabili
CVE-2026-108120 (Brian Mariani from DigitalCanion SA has discovereda path
traversal vul ...)
TODO: check
CVE-2026-106933 (The Blaze Demo Importer WordPress plugin before 1.0.17 does
not saniti ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-106028 (The ActiveTrail for WooCommerce WordPress plugin through
1.2.6 does no ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-106014 (The Gateway for Vantiv on WC WordPress plugin through 1.0.1
does not v ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-106010 (The BDM Digital Payment Gateway WordPress plugin through
1.3.12 does n ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103311 (The Coinbase Commerce Payment Gateway for WooCommerce
WordPress plugin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103091 (Missing Authorization (CWE-862) and Initialization of a
Resource with ...)
TODO: check
CVE-2026-102503 (Missing Authentication for Critical Function (CWE-306) and
Missing Aut ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d5be052bdb028005f356b67f093b1e04f5a20479
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d5be052bdb028005f356b67f093b1e04f5a20479
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
