Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2dbd3217 by Salvatore Bonaccorso at 2026-10-21T21:09:22+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1467,63 +1467,63 @@ CVE-2026-114095 (Dulwich before 1.2.9 contains a denial
of service vulnerability
CVE-2026-114094 (Dulwich before 1.2.9 fails to validate DOS drive letter
prefixes in Gi ...)
TODO: check
CVE-2026-114093 (Trigger.dev before 4.5.6 contains a cross-site request
forgery vulnera ...)
- TODO: check
+ NOT-FOR-US: Trigger.dev
CVE-2026-114092 (Trigger.dev before 4.5.0 performs no authentication or
organization ch ...)
- TODO: check
+ NOT-FOR-US: Trigger.dev
CVE-2026-114091 (Trigger.dev before 4.5.0 looks up runs by friendlyId alone in
the api. ...)
- TODO: check
+ NOT-FOR-US: Trigger.dev
CVE-2026-114090 (Trigger.dev cli-v3 from 3.0.0 before 4.5.4 contains a missing
authenti ...)
- TODO: check
+ NOT-FOR-US: Trigger.dev
CVE-2026-114089 (Trigger.dev before 4.5.2 contains a cross-site request
forgery vulnera ...)
- TODO: check
+ NOT-FOR-US: Trigger.dev
CVE-2026-114088 (Trigger.dev before 4.5.4 contains a hardcoded default secret
vulnerabi ...)
- TODO: check
+ NOT-FOR-US: Trigger.dev
CVE-2026-114087 (Trigger.dev before 4.5.6 self-hosted Docker Compose
deployments using ...)
- TODO: check
+ NOT-FOR-US: Trigger.dev
CVE-2026-114086 (Trigger.dev before 4.5.5 contains a missing authentication
vulnerabili ...)
- TODO: check
+ NOT-FOR-US: Trigger.dev
CVE-2026-114085 (Trigger.dev through 4.7.6 contains a missing authentication
vulnerabil ...)
- TODO: check
+ NOT-FOR-US: Trigger.dev
CVE-2026-114084 (Trigger.dev before 4.5.6 contains an SQL injection
vulnerability in th ...)
- TODO: check
+ NOT-FOR-US: Trigger.dev
CVE-2026-114083 (Trigger.dev before 4.5.0-rc.3 contains a path traversal
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Trigger.dev
CVE-2026-114082 (Trigger.dev before 4.6.2 contains an authorization
vulnerability that ...)
- TODO: check
+ NOT-FOR-US: Trigger.dev
CVE-2026-114081 (Trigger.dev before 4.5.6 contains an SQL injection
vulnerability in th ...)
- TODO: check
+ NOT-FOR-US: Trigger.dev
CVE-2026-114080 (Trigger.dev before 4.5.2 contains a blind server-side request
forgery ...)
- TODO: check
+ NOT-FOR-US: Trigger.dev
CVE-2026-114079 (Trigger.dev before 4.5.6 contains an improper authorization
vulnerabil ...)
- TODO: check
+ NOT-FOR-US: Trigger.dev
CVE-2026-114078 (Trigger.dev before 4.5.6 contains an authorization bypass
vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: Trigger.dev
CVE-2026-114077 (Trigger.dev before 4.5.6 contains an authorization bypass
vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: Trigger.dev
CVE-2026-114076 (Trigger.dev before 4.5.2 contains a blind server-side request
forgery ...)
- TODO: check
+ NOT-FOR-US: Trigger.dev
CVE-2026-114075 (Trigger.dev before 4.5.12 contains an authorization bypass
vulnerabili ...)
- TODO: check
+ NOT-FOR-US: Trigger.dev
CVE-2026-114074 (Trigger.dev before 4.5.10 contains a server-side request
forgery vulne ...)
- TODO: check
+ NOT-FOR-US: Trigger.dev
CVE-2026-114073 (Trigger.dev CLI before 4.5.9 contains an information
disclosure vulner ...)
- TODO: check
+ NOT-FOR-US: Trigger.dev
CVE-2026-114072 (The Trigger.dev webapp before 4.5.12 contains a cross-site
request for ...)
- TODO: check
+ NOT-FOR-US: Trigger.dev
CVE-2026-114071 (Trigger.dev before 4.5.12 contains an authorization bypass
vulnerabili ...)
- TODO: check
+ NOT-FOR-US: Trigger.dev
CVE-2026-114070 (Trigger.dev 4.5.0 before 4.6.0 contains an information
disclosure vuln ...)
- TODO: check
+ NOT-FOR-US: Trigger.dev
CVE-2026-114069 (Trigger.dev before 4.6.0 contains an improper authorization
vulnerabil ...)
- TODO: check
+ NOT-FOR-US: Trigger.dev
CVE-2026-114068 (Trigger.dev before 4.6.0 contains a missing authorization
vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: Trigger.dev
CVE-2026-114067 (Trigger.dev 4.5.0 before 4.6.2 contains an improper
authorization vuln ...)
- TODO: check
+ NOT-FOR-US: Trigger.dev
CVE-2026-114066 (Trigger.dev before 4.7.0 contains a missing authorization
vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: Trigger.dev
CVE-2026-114065 (Trigger.dev before 4.7.3 contains a tenant filtering bypass
vulnerabil ...)
- TODO: check
+ NOT-FOR-US: Trigger.dev
CVE-2026-114064 (Snipe-IT before 8.7.0 contains a server-side request forgery
vulnerabi ...)
TODO: check
CVE-2026-114063 (SvelteKit (@sveltejs/kit) from 2.10.0 before 3.0.0 contains a
path tra ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2dbd321759383d61908694f71d1418fdea8518c9
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2dbd321759383d61908694f71d1418fdea8518c9
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
