Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f02e9113 by Salvatore Bonaccorso at 2026-10-26T05:55:37+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -23,7 +23,7 @@ CVE-2026-116199 (Snipe-IT before 8.6.3 contains an
authentication bypass in Goog
CVE-2026-116198 (Snipe-IT before 8.7.0 contains a missing encryption
vulnerability in A ...)
- snipe-it <itp> (bug #1005172)
CVE-2026-116197 (Edgeless Systems Contrast from 1.21.0 before 1.25.0 contains
a non-det ...)
- TODO: check
+ NOT-FOR-US: Edgeless Systems Contrast
CVE-2026-116196 (Rclone before v1.75.2 contains a credential exposure
vulnerability in ...)
- rclone 1.75.2-1
NOTE:
https://github.com/rclone/rclone/security/advisories/GHSA-gpw7-77cq-9f72
@@ -214,25 +214,25 @@ CVE-2026-116140 (ImageMagick before 6.9.13-58 and 7.x
before 7.1.2-33 incorrectl
CVE-2026-116139 (WWBN AVideo 26.0 through 29.3.0 contains a stored cross-site
scripting ...)
NOT-FOR-US: WWBN AVideo
CVE-2026-116137 (adm-zip through 0.6.1 contains a duplicate-entry validation
bypass tha ...)
- TODO: check
+ NOT-FOR-US: adm-zip
CVE-2026-116136 (ProjectSend 2.0.0 through 2.7.1 contains an incomplete
authorization v ...)
- TODO: check
+ NOT-FOR-US: ProjectSend
CVE-2026-116073 (Leon before commit 50df142 contains a path traversal
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Leon
CVE-2026-116072 (Infinity for Reddit through 8.3.4 contains a login cross-site
request ...)
- TODO: check
+ NOT-FOR-US: Infinity for Reddit
CVE-2026-116071 (rotki before 1.44.2 contains a weak key derivation
vulnerability that ...)
- TODO: check
+ NOT-FOR-US: rotki
CVE-2026-116070 (Docker-Proxy through 5.1.9 contains a missing authentication
vulnerabi ...)
TODO: check
CVE-2026-116069 (NiubiGEO before 0.3.2 contains an unauthenticated server-side
request ...)
- TODO: check
+ NOT-FOR-US: NiubiGEO
CVE-2026-116068 (Dokploy through 0.30.10 contains an authorization bypass
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Dokploy
CVE-2026-116067 (Paisa before 0.7.8 contains a path traversal vulnerability in
the GetF ...)
- TODO: check
+ NOT-FOR-US: Paisa
CVE-2026-116066 (Firecrawl before 2.11.586 contains a server-side request
forgery vulne ...)
- TODO: check
+ NOT-FOR-US: Firecrawl
CVE-2026-116063 (A weakness has been identified in DedeCMS up to 5.7.118.
Impacted is t ...)
NOT-FOR-US: DedeCMS
CVE-2026-116062 (A security flaw has been discovered in SourceCodester
Performance Indi ...)
@@ -242,27 +242,27 @@ CVE-2026-116061 (A vulnerability was identified in
SourceCodester Performance In
CVE-2026-116060 (A vulnerability was determined in SourceCodester Performance
Indicator ...)
NOT-FOR-US: SourceCodester
CVE-2026-116058 (A vulnerability was found in Alfresco Activiti up to
7.21.0-rc.692. Af ...)
- TODO: check
+ NOT-FOR-US: Alfresco Activiti
CVE-2026-116057 (A vulnerability has been found in KodCloud KodExplorer up to
4.55. Aff ...)
- TODO: check
+ NOT-FOR-US: KodCloud KodExplorer
CVE-2026-116056 (A flaw has been found in KodCloud KodExplorer up to 4.56.
Affected is ...)
- TODO: check
+ NOT-FOR-US: KodCloud KodExplorer
CVE-2026-116055 (A vulnerability was detected in SourceCodester Performance
Indicator S ...)
NOT-FOR-US: SourceCodester
CVE-2026-116054 (A security vulnerability has been detected in SH3. This
affects an unk ...)
- TODO: check
+ NOT-FOR-US: SH3
CVE-2026-116053 (A weakness has been identified in dbcli mycli up to
2.29.4/2.30.1. The ...)
TODO: check
CVE-2026-116052 (A security flaw has been discovered in LinkStackOrg LinkStack
up to 4. ...)
- TODO: check
+ NOT-FOR-US: LinkStack
CVE-2026-116050 (A vulnerability has been found in krupalshah Employee
Recruitment Syst ...)
- TODO: check
+ NOT-FOR-US: krupalshah Employee Recruitment System
CVE-2026-116049 (A flaw has been found in krupalshah EmployeeRecruitmentSystem
up to 92 ...)
- TODO: check
+ NOT-FOR-US: krupalshah Employee Recruitment System
CVE-2026-116048 (A vulnerability was detected in krupalshah
EmployeeRecruitmentSystem u ...)
- TODO: check
+ NOT-FOR-US: krupalshah Employee Recruitment System
CVE-2026-116047 (A vulnerability has been found in Privoce Vocechat up to
0.9.121. This ...)
- TODO: check
+ NOT-FOR-US: Privoce Vocechat
CVE-2026-115825 (HTTP::Server::PSGI versions before 1.0056 for Perl allow a
single requ ...)
- libplack-perl 1.0057-1 (bug #1152055)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44625163/
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f02e9113274d85a0abab28ffbf4a36f2787ae971
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f02e9113274d85a0abab28ffbf4a36f2787ae971
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
