Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e4f74c42 by Salvatore Bonaccorso at 2026-10-29T22:04:21+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -347,11 +347,11 @@ CVE-2026-119130 (Wasmtime before 36.0.18, 37.0.0 before
48.0.6, and 49.0.0 befor
- rust-wasmtime <unfixed>
NOTE:
https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-5qpp-g3j2-8frx
CVE-2026-119129 (ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.19.5 contains
a missin ...)
- TODO: check
+ NOT-FOR-US: ZITADEL
CVE-2026-119128 (ZITADEL 4.0.0 before 4.19.5 contains an authentication bypass
vulnerab ...)
- TODO: check
+ NOT-FOR-US: ZITADEL
CVE-2026-119127 (ZITADEL 4.0.0 before 4.19.5 contains a host header injection
vulnerabi ...)
- TODO: check
+ NOT-FOR-US: ZITADEL
CVE-2026-119126 (Parse Server before 8.6.106 and 9.0.0 before 9.10.5-alpha.7
mishandles ...)
NOT-FOR-US: Parse Server
CVE-2026-119125 (Parse Server before 8.6.107 and 9.0.0 before 9.10.5-alpha.8
returns th ...)
@@ -361,15 +361,15 @@ CVE-2026-119124 (ImageMagick before 7.1.2-34 contains a
heap-based buffer overfl
CVE-2026-119123 (ImageMagick before 7.1.2-34 contains a stack overflow
vulnerability in ...)
TODO: check
CVE-2026-119122 (Crawl4AI before 0.9.5 contains a blind server-side request
forgery vul ...)
- TODO: check
+ NOT-FOR-US: Crawl4AI
CVE-2026-119121 (Crawl4AI from 0.9.0 before 0.9.5 contains a JavaScript
injection vulne ...)
- TODO: check
+ NOT-FOR-US: Crawl4AI
CVE-2026-119120 (Crawl4AI from 0.9.0 before 0.9.5 fails to filter the
CosineStrategy mo ...)
- TODO: check
+ NOT-FOR-US: Crawl4AI
CVE-2026-119119 (Crawl4AI before 0.9.5 contains a denial of service
vulnerability in th ...)
- TODO: check
+ NOT-FOR-US: Crawl4AI
CVE-2026-119118 (Crawl4AI before 0.9.5 contains an improper certificate
validation vuln ...)
- TODO: check
+ NOT-FOR-US: Crawl4AI
CVE-2026-119115 (Incorrect authorization in the issuer resolution logic in AWS
Private ...)
NOT-FOR-US: Amazon
CVE-2026-119054 (Multiple Pages Generator by Themeisle before 4.2.5 contains a
stored c ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e4f74c4232990563b9ba1b17b110ccd7779719b5
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e4f74c4232990563b9ba1b17b110ccd7779719b5
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
