Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d8b8d704 by Salvatore Bonaccorso at 2026-10-19T16:29:17+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -245,68 +245,68 @@ CVE-2026-112006 (OpenTelemetry
opentelemetry-exporter-otlp-proto-http 1.5.0 befo
- python-opentelemetry 1.45.1-1
NOTE: Fixed by:
https://github.com/open-telemetry/opentelemetry-python/commit/89cc68b9ea7e15969b4f042d63397bdc74a3d60e
(v1.45.0)
CVE-2026-112005 (WhoDB 0.104.0 before 0.135.0 contains a path traversal
vulnerability t ...)
- TODO: check
+ NOT-FOR-US: WhoDB
CVE-2026-112004 (Teable before 2026-10-12T12-45-53Z.3331 contains an
authorization bypa ...)
- TODO: check
+ NOT-FOR-US: Teable
CVE-2026-112003 (ProjectSend 2.0.0 before 2.7.0 contains a path validation
flaw in Orph ...)
- TODO: check
+ NOT-FOR-US: ProjectSend
CVE-2026-112002 (ProjectSend 2.5.0 before 2.7.0 contains an unverified
password change ...)
- TODO: check
+ NOT-FOR-US: ProjectSend
CVE-2026-112001 (ProjectSend 2.0.0 before 2.7.0 contains an incorrect
authorization vul ...)
- TODO: check
+ NOT-FOR-US: ProjectSend
CVE-2026-112000 (Vanus 0.8.0 through 0.9.0 contains a missing authorization
vulnerabili ...)
- TODO: check
+ NOT-FOR-US: Vanus
CVE-2026-111999 (Vanus 0.8.0 through 0.9.0 contains a missing authentication
vulnerabil ...)
- TODO: check
+ NOT-FOR-US: Vanus
CVE-2026-111998 (Vanus 0.8.0 through 0.9.0 contains a default credentials
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Vanus
CVE-2026-111997 (ip-address before 10.7.4 allows a denial of service (CPU
consumption f ...)
- node-ip-address <unfixed>
NOTE:
https://github.com/beaugunderson/ip-address/security/advisories/GHSA-rxp7-6hxx-x8q5
CVE-2026-111993 (A flaw has been found in Soarkey StudentManagement up to
e08f7f1d5015a ...)
- TODO: check
+ NOT-FOR-US: Soarkey StudentManagement
CVE-2026-111992 (A vulnerability was detected in itsmeravitejak
Online-Examination-Syst ...)
- TODO: check
+ NOT-FOR-US: itsmeravitejak Online-Examination-System
CVE-2026-111991 (A security vulnerability has been detected in WongKinYiu
yolov9 0.1. T ...)
- TODO: check
+ NOT-FOR-US: WongKinYiu yolov9
CVE-2026-111990 (A weakness has been identified in kishan0725 Hospital
Management Syste ...)
- TODO: check
+ NOT-FOR-US: kishan0725 Hospital Management System
CVE-2026-111988 (A security flaw has been discovered in dyad-sh dyad up to
1.16.0. Affe ...)
- TODO: check
+ NOT-FOR-US: dyad-sh dyad
CVE-2026-111987 (A vulnerability was identified in AUTOMATIC1111
stable-diffusion-webui ...)
- TODO: check
+ NOT-FOR-US: AUTOMATIC1111 stable-diffusion-webui
CVE-2026-111986 (A vulnerability was determined in AUTOMATIC1111
stable-diffusion-webui ...)
- TODO: check
+ NOT-FOR-US: AUTOMATIC1111 stable-diffusion-webui
CVE-2026-111985 (A vulnerability was found in AUTOMATIC1111
stable-diffusion-webui up t ...)
- TODO: check
+ NOT-FOR-US: AUTOMATIC1111 stable-diffusion-webui
CVE-2026-111984 (A vulnerability has been found in AUTOMATIC1111
stable-diffusion-webui ...)
- TODO: check
+ NOT-FOR-US: AUTOMATIC1111 stable-diffusion-webui
CVE-2026-111942 (A weakness has been identified in hrisikeshpal
Blood_Bank_Management_S ...)
- TODO: check
+ NOT-FOR-US: hrisikeshpal Blood_Bank_Management_System
CVE-2026-111877 (A vulnerability was determined in dext34-morgan Books4Cash up
to a8d3e ...)
- TODO: check
+ NOT-FOR-US: dext34-morgan Books4Cash
CVE-2026-111876 (A vulnerability was found in alexpasmantier television up to
0.15.9. A ...)
- TODO: check
+ NOT-FOR-US: alexpasmantier television
CVE-2026-111875 (A vulnerability has been found in David-Crty Databasement up
to 1.8.1. ...)
- TODO: check
+ NOT-FOR-US: David-Crty Databasement
CVE-2026-111874 (A flaw has been found in OpenCATS 0.10.0. Affected is the
function pro ...)
- TODO: check
+ NOT-FOR-US: OpenCATS
CVE-2026-111873 (A vulnerability was detected in itsmeravitejak
Online-Examination-Syst ...)
- TODO: check
+ NOT-FOR-US: itsmeravitejak Online-Examination-System
CVE-2026-111872 (A security vulnerability has been detected in itsmeravitejak
Online-Ex ...)
- TODO: check
+ NOT-FOR-US: itsmeravitejak Online-Examination-System
CVE-2026-111871 (A weakness has been identified in itsmeravitejak
Online-Examination-Sy ...)
- TODO: check
+ NOT-FOR-US: itsmeravitejak Online-Examination-System
CVE-2026-111870 (A security flaw has been discovered in itsmeravitejak
Online-Examinati ...)
- TODO: check
+ NOT-FOR-US: itsmeravitejak Online-Examination-System
CVE-2026-111869 (A vulnerability was identified in makeplane plane up to
1.4.2. Impacte ...)
- TODO: check
+ NOT-FOR-US: makeplane plane
CVE-2026-111868 (A vulnerability was determined in datastax pulsar-jms up to
9.0.3. Thi ...)
- TODO: check
+ NOT-FOR-US: datastax pulsar-jms
CVE-2026-111866 (A weakness has been identified in nemoTyrant manong up to
7c9e5228e133 ...)
- TODO: check
+ NOT-FOR-US: nemoTyrant manong
CVE-2026-111865 (A security flaw has been discovered in THU-MIG yoloe up to
40cd606cabd ...)
- TODO: check
+ NOT-FOR-US: THU-MIG yoloe
CVE-2026-111041 (The AI Engine WordPress plugin before 3.7.9 does not verify
that the ...)
NOT-FOR-US: WordPress plugin
CVE-2026-110981 (The WP Photo Album Plus WordPress plugin before 9.2.11.002
does not pr ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d8b8d7041127ddad68c3d50c2b57d9e6ed31f085
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d8b8d7041127ddad68c3d50c2b57d9e6ed31f085
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
