Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ef303fe5 by Salvatore Bonaccorso at 2026-10-28T16:24:48+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1984,37 +1984,37 @@ CVE-2026-117526 (A vulnerability was found in reduxjs
redux-devtools 5.0.0. Affe
- node-redux-devtools <unfixed>
NOTE: https://github.com/reduxjs/redux-devtools/issues/2125
CVE-2026-117516 (A weakness has been identified in oretnom23
php-travel-agency-system. ...)
- TODO: check
+ NOT-FOR-US: oretnom23 php-travel-agency-system
CVE-2026-117515 (A security flaw has been discovered in oretnom23
php-travel-agency-sys ...)
- TODO: check
+ NOT-FOR-US: oretnom23 php-travel-agency-system
CVE-2026-117514 (A vulnerability was identified in oretnom23
php-travel-agency-system. ...)
- TODO: check
+ NOT-FOR-US: oretnom23 php-travel-agency-system
CVE-2026-117513 (A vulnerability was determined in oretnom23
php-travel-agency-system. ...)
- TODO: check
+ NOT-FOR-US: oretnom23 php-travel-agency-system
CVE-2026-117512 (A vulnerability was found in oretnom23
php-travel-agency-system. This ...)
- TODO: check
+ NOT-FOR-US: oretnom23 php-travel-agency-system
CVE-2026-117511 (A vulnerability has been found in desmondmorris
node-tesseract up to 0 ...)
- TODO: check
+ NOT-FOR-US: desmondmorris node-tesseract (not the same as src:tesseract)
CVE-2026-117510 (A flaw has been found in Dexmal Dexbotic up to 0.2.0.
Affected by this ...)
- TODO: check
+ NOT-FOR-US: Dexmal Dexbotic
CVE-2026-117509 (A vulnerability was detected in crownpku Rasa_NLU_Chi up to
0.12.2. Af ...)
- TODO: check
+ NOT-FOR-US: crownpku Rasa_NLU_Chi
CVE-2026-117507 (A security vulnerability has been detected in a2aproject
a2a-java up t ...)
- TODO: check
+ NOT-FOR-US: a2aproject a2a-java
CVE-2026-117506 (A weakness has been identified in a2aproject a2a-java up to
1.2.0.Fina ...)
- TODO: check
+ NOT-FOR-US: a2aproject a2a-java
CVE-2026-117505 (A security flaw has been discovered in a2aproject a2a-java up
to 1.2.0 ...)
- TODO: check
+ NOT-FOR-US: a2aproject a2a-java
CVE-2026-117504 (A vulnerability was identified in a2aproject a2a-go up to
2.4.0. The a ...)
- TODO: check
+ NOT-FOR-US: a2aproject a2a-go
CVE-2026-117503 (A vulnerability was determined in a2aproject a2a-go up to
2.4.0. Impac ...)
- TODO: check
+ NOT-FOR-US: a2aproject a2a-go
CVE-2026-117499 (@fastify/session is a session plugin for Fastify. In all
releases befo ...)
- TODO: check
+ NOT-FOR-US: fastify/session
CVE-2026-117494 (Cross-Site Scripting (XSS) in the processing of SVG images
submitted t ...)
- TODO: check
+ NOT-FOR-US: Sisense
CVE-2026-117493 (Stored cross-site scripting (XSS) in BloX widgets. The
/api/dashboards ...)
- TODO: check
+ NOT-FOR-US: Sisense
CVE-2026-117466 (In affected versions of Octopus Server, a user holding the
System Mana ...)
NOT-FOR-US: Octopus Deploy
CVE-2026-117341 (In affected versions of Octopus Server, creating a user
invitation wri ...)
@@ -2036,49 +2036,49 @@ CVE-2026-116894 (REDAXO before 5.21.5 contains an
insufficient session expiratio
CVE-2026-116893 (REDAXO core before 5.21.5 contains a missing authorization
vulnerabili ...)
NOT-FOR-US: REDAXO
CVE-2026-116892 (SemanticMediaWiki from 3.1.0 before 7.3.1 contains a
reflected cross-s ...)
- TODO: check
+ NOT-FOR-US: SemanticMediaWiki
CVE-2026-116891 (SemanticMediaWiki from 4.2.0 before 7.2.1 contains a
reflected cross-s ...)
- TODO: check
+ NOT-FOR-US: SemanticMediaWiki
CVE-2026-116890 (Semantic MediaWiki from 3.0.0 before 7.3.0 contains a missing
authoriz ...)
- TODO: check
+ NOT-FOR-US: SemanticMediaWiki
CVE-2026-116889 (SemanticMediaWiki from 2.5.0 before 7.3.1 contains a stored
cross-site ...)
- TODO: check
+ NOT-FOR-US: SemanticMediaWiki
CVE-2026-116888 (SemanticMediaWiki from 3.2.0 before 7.3.1 contains a stored
cross-site ...)
- TODO: check
+ NOT-FOR-US: SemanticMediaWiki
CVE-2026-116887 (Semantic MediaWiki from 3.0.0 before 7.3.1 contains a stored
cross-sit ...)
- TODO: check
+ NOT-FOR-US: SemanticMediaWiki
CVE-2026-116886 (Semantic MediaWiki from 2.5.0 before 7.3.1 contains a stored
cross-sit ...)
- TODO: check
+ NOT-FOR-US: SemanticMediaWiki
CVE-2026-116885 (Semantic MediaWiki from 3.1.0 before 7.3.1 contains a
reflected cross- ...)
- TODO: check
+ NOT-FOR-US: SemanticMediaWiki
CVE-2026-116884 (SemanticMediaWiki from 5.0.0 before 7.3.1 contains a stored
cross-site ...)
- TODO: check
+ NOT-FOR-US: SemanticMediaWiki
CVE-2026-116883 (Semantic MediaWiki from 3.1.0 before 7.3.1 contains a stored
cross-sit ...)
- TODO: check
+ NOT-FOR-US: SemanticMediaWiki
CVE-2026-116882 (Semantic MediaWiki from 4.2.0 before 7.3.1 contains a stored
cross-sit ...)
- TODO: check
+ NOT-FOR-US: SemanticMediaWiki
CVE-2026-116881 (Semantic MediaWiki from 3.0.0 before 7.3.1 contains a
cross-site scrip ...)
- TODO: check
+ NOT-FOR-US: SemanticMediaWiki
CVE-2026-116880 (Semantic MediaWiki from 3.0.0 before 7.3.1 contains a
cross-site reque ...)
- TODO: check
+ NOT-FOR-US: SemanticMediaWiki
CVE-2026-116879 (Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing
authoriz ...)
- TODO: check
+ NOT-FOR-US: SemanticMediaWiki
CVE-2026-116878 (Semantic MediaWiki from 2.5.0 before 7.3.1 contains an
uncontrolled re ...)
- TODO: check
+ NOT-FOR-US: SemanticMediaWiki
CVE-2026-116877 (Semantic MediaWiki from 2.5.0 before 7.3.1 contains an
uncontrolled re ...)
- TODO: check
+ NOT-FOR-US: SemanticMediaWiki
CVE-2026-116876 (Semantic MediaWiki from 2.5.0 before 7.3.1 contains an
improper author ...)
- TODO: check
+ NOT-FOR-US: SemanticMediaWiki
CVE-2026-116875 (SemanticMediaWiki from 3.0.0 before 7.3.1 contains a
reflected cross-s ...)
- TODO: check
+ NOT-FOR-US: SemanticMediaWiki
CVE-2026-116874 (SemanticMediaWiki from 3.1.0 before 7.3.1 contains a
reflected cross-s ...)
- TODO: check
+ NOT-FOR-US: SemanticMediaWiki
CVE-2026-116873 (Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing
authoriz ...)
- TODO: check
+ NOT-FOR-US: SemanticMediaWiki
CVE-2026-116872 (Semantic MediaWiki from 3.0.0 before 7.3.1 contains an
algorithmic com ...)
- TODO: check
+ NOT-FOR-US: SemanticMediaWiki
CVE-2026-116871 (Semantic MediaWiki 3.0.0 before 7.3.1 contains an
uncontrolled recursi ...)
- TODO: check
+ NOT-FOR-US: SemanticMediaWiki
CVE-2026-116870 (In affected versions of Octopus Server, OIDC token issuer
validation w ...)
NOT-FOR-US: Octopus Deploy
CVE-2026-116863 (Cross-Site Request Forgery (CSRF) vulnerability in Tribulant
Software ...)
@@ -2753,9 +2753,9 @@ CVE-2026-116723 (FLTK through 1.4.5 contains a
stack-based buffer overflow vulne
CVE-2026-116671 (Infinite loop in Xpdf 4.06 and earlier, due to incorrect
validation of ...)
TODO: check
CVE-2026-116640 (A flaw has been found in Saruf-Ratul
HR-Payroll-Management-System e7cd ...)
- TODO: check
+ NOT-FOR-US: Saruf-Ratul HR-Payroll-Management-System
CVE-2026-116639 (A vulnerability was detected in MD-MAFUJUL-HASAN
Online-Payroll-Manage ...)
- TODO: check
+ NOT-FOR-US: MD-MAFUJUL-HASAN Online-Payroll-Management-System
CVE-2026-116623 (A vulnerability was detected in code-projects Simple Content
Managemen ...)
NOT-FOR-US: code-projects
CVE-2026-116620 (A security vulnerability has been detected in Tencent
RapidJSON up to ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ef303fe5c9b9aa83d2fe64993ac9e28d289b9c5d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ef303fe5c9b9aa83d2fe64993ac9e28d289b9c5d
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
