Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
b54e5a35 by security tracker role at 2026-10-25T19:16:40+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,19 +1,19 @@
CVE-2026-116211 (YesWiki 4.5.0 before 4.7.0 contains an SQL injection
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-116208 (YesWiki from 4.6.2 before 4.7.0 contains a missing
authorization vulne ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-116207 (YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before
5.0.0-alpha4 contai ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-116206 (YesWiki from 4.2.0 before 4.7.0 contains a stored cross-site
scripting ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-116205 (YesWiki before 4.7.0 contains an unauthenticated server-side
request f ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-116204 (YesWiki before 4.7.0 contains a cross-site request forgery
vulnerabili ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-116203 (YesWiki before 4.7.0 contains a stored cross-site scripting
vulnerabil ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-116202 (YesWiki before 4.7.0 contains a stored cross-site scripting
vulnerabil ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-116201 (Snipe-IT before 8.5.0 contains a SAML assertion replay
vulnerability t ...)
TODO: check
CVE-2026-116200 (Snipe-IT before 8.6.3 ignores the ldap_start_tls() return
value in Lda ...)
@@ -51,9 +51,9 @@ CVE-2026-116185 (OpenRemote core before 1.31.0 contains an
authorization bypass
CVE-2026-116184 (OpenRemote before 1.31.0 contains an authorization bypass
vulnerabilit ...)
TODO: check
CVE-2026-116183 (phpMyFAQ before 4.1.10 contains an object-level authorization
bypass v ...)
- TODO: check
+ NOT-FOR-US: phpMyFAQ
CVE-2026-116182 (phpMyFAQ before 4.1.10 contains a server-side request forgery
vulnerab ...)
- TODO: check
+ NOT-FOR-US: phpMyFAQ
CVE-2026-116181 (vLLM from 0.20.1 before 0.29.0 contains an improper input
validation v ...)
TODO: check
CVE-2026-116180 (vLLM from 0.8.5 before 0.31.0 has a denial of service flaw.
LogprobsTe ...)
@@ -75,27 +75,27 @@ CVE-2026-116173 (vLLM from 0.22.0 before 0.24.0 contains a
denial of service vul
CVE-2026-116172 (vLLM from 0.22.0 before 0.24.0 contains an improper input
validation v ...)
TODO: check
CVE-2026-116171 (SiYuan 3.5.4 before 3.8.7 on Windows contains a
sensitive-path denylis ...)
- TODO: check
+ NOT-FOR-US: SiYuan
CVE-2026-116170 (SiYuan before v3.8.7 contains an sql injection vulnerability
that allo ...)
- TODO: check
+ NOT-FOR-US: SiYuan
CVE-2026-116169 (SiYuan from 2.10.0 before 3.8.7 contains a stored cross-site
scripting ...)
- TODO: check
+ NOT-FOR-US: SiYuan
CVE-2026-116168 (SiYuan before 3.8.7 contains a path traversal vulnerability
in the MCP ...)
- TODO: check
+ NOT-FOR-US: SiYuan
CVE-2026-116167 (SiYuan from 2.9.0 before 3.8.7 contains a cross-site
scripting vulnera ...)
- TODO: check
+ NOT-FOR-US: SiYuan
CVE-2026-116166 (SiYuan 3.6.0 before 3.8.7 accepts and persists the
networkServeTLS set ...)
- TODO: check
+ NOT-FOR-US: SiYuan
CVE-2026-116165 (Parse Server before 8.6.101 and 9.0.0 before 9.10.4-alpha.4
contains a ...)
- TODO: check
+ NOT-FOR-US: Parse Server
CVE-2026-116164 (Parse Server before 8.6.100 and 9.0.0 before 9.10.4-alpha.3
does not r ...)
- TODO: check
+ NOT-FOR-US: Parse Server
CVE-2026-116163 (Parse Server before 8.6.102 and 9.0.0 before 9.10.5-alpha.2
contains a ...)
- TODO: check
+ NOT-FOR-US: Parse Server
CVE-2026-116162 (Parse Server before 8.6.104 and 9.0.0 before 9.10.5-alpha.5
saves the ...)
- TODO: check
+ NOT-FOR-US: Parse Server
CVE-2026-116161 (Parse Server before 8.6.103 and 9.0.0 before 9.10.5-alpha.4
contains a ...)
- TODO: check
+ NOT-FOR-US: Parse Server
CVE-2026-116160 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a heap-b ...)
TODO: check
CVE-2026-116159 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a memory ...)
@@ -139,7 +139,7 @@ CVE-2026-116141 (ImageMagick before 7.1.2-33 contains a
policy bypass vulnerabil
CVE-2026-116140 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33
incorrectly parse ...)
TODO: check
CVE-2026-116139 (WWBN AVideo 26.0 through 29.3.0 contains a stored cross-site
scripting ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-116137 (adm-zip through 0.6.1 contains a duplicate-entry validation
bypass tha ...)
TODO: check
CVE-2026-116136 (ProjectSend 2.0.0 through 2.7.1 contains an incomplete
authorization v ...)
@@ -161,13 +161,13 @@ CVE-2026-116067 (Paisa before 0.7.8 contains a path
traversal vulnerability in t
CVE-2026-116066 (Firecrawl before 2.11.586 contains a server-side request
forgery vulne ...)
TODO: check
CVE-2026-116063 (A weakness has been identified in DedeCMS up to 5.7.118.
Impacted is t ...)
- TODO: check
+ NOT-FOR-US: DedeCMS
CVE-2026-116062 (A security flaw has been discovered in SourceCodester
Performance Indi ...)
- TODO: check
+ NOT-FOR-US: SourceCodester
CVE-2026-116061 (A vulnerability was identified in SourceCodester Performance
Indicator ...)
- TODO: check
+ NOT-FOR-US: SourceCodester
CVE-2026-116060 (A vulnerability was determined in SourceCodester Performance
Indicator ...)
- TODO: check
+ NOT-FOR-US: SourceCodester
CVE-2026-116058 (A vulnerability was found in Alfresco Activiti up to
7.21.0-rc.692. Af ...)
TODO: check
CVE-2026-116057 (A vulnerability has been found in KodCloud KodExplorer up to
4.55. Aff ...)
@@ -175,7 +175,7 @@ CVE-2026-116057 (A vulnerability has been found in KodCloud
KodExplorer up to 4.
CVE-2026-116056 (A flaw has been found in KodCloud KodExplorer up to 4.56.
Affected is ...)
TODO: check
CVE-2026-116055 (A vulnerability was detected in SourceCodester Performance
Indicator S ...)
- TODO: check
+ NOT-FOR-US: SourceCodester
CVE-2026-116054 (A security vulnerability has been detected in SH3. This
affects an unk ...)
TODO: check
CVE-2026-116053 (A weakness has been identified in dbcli mycli up to
2.29.4/2.30.1. The ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b54e5a35d38eeec2bbe1cb3edac8a943acbd71d6
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b54e5a35d38eeec2bbe1cb3edac8a943acbd71d6
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
