Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
99247e48 by Salvatore Bonaccorso at 2026-10-31T09:33:01+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -33,75 +33,75 @@ CVE-2026-88942 (The Product Filter for WooCommerce by WBW
plugin for WordPress i
CVE-2026-82214 (The Quick Event Manager WordPress plugin before 9.19 does not
verify t ...)
NOT-FOR-US: WordPress plugin
CVE-2026-7005 (WIT SynApps Runtime through 1.4.11 contains a browser-mediated
cross-o ...)
- TODO: check
+ NOT-FOR-US: WIT SynApps Runtime
CVE-2026-78403 (Stack-based buffer overflow and missing authorization
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Thales Sentinel Keys Server on Windows
CVE-2026-78402 (Stack-based buffer overflow and out-of-bounds write
vulnerability in T ...)
- TODO: check
+ NOT-FOR-US: Thales Sentinel Keys Server on Windows
CVE-2026-77152 (Improper Authorization vulnerability in Drupal Field
Collection for Dr ...)
NOT-FOR-US: Drupal core and addons
CVE-2026-63414 (Shopify App is a Rails engine for building Shopify
applications. From ...)
- TODO: check
+ NOT-FOR-US: Shopify App
CVE-2026-63410 (secp256k1-native is a native C secp256k1 implementation for
Ruby. In a ...)
- TODO: check
+ NOT-FOR-US: secp256k1-native Ruby gem
CVE-2026-63402 (i18next is an internationalization framework for JavaScript.
Prior to ...)
- node-i18next <unfixed>
NOTE:
https://github.com/i18next/i18next/security/advisories/GHSA-6jcc-5g8w-32mx
NOTE: Fixed by:
https://github.com/i18next/i18next/commit/642137b7786d83661ec3ee53027798dc4b81d30a
(v26.3.4)
CVE-2026-63401 (Coop is an open source review and moderation tool from ROOST.
Prior to ...)
- TODO: check
+ NOT-FOR-US: Coop
CVE-2026-63400 (Coop is an open source review and moderation tool from ROOST.
Prior to ...)
- TODO: check
+ NOT-FOR-US: Coop
CVE-2026-63399 (Coop is an open source review and moderation tool from ROOST.
Prior to ...)
- TODO: check
+ NOT-FOR-US: Coop
CVE-2026-63398 (Coop is an open source review and moderation tool from ROOST.
Prior to ...)
- TODO: check
+ NOT-FOR-US: Coop
CVE-2026-63396 (Coop is an open source review and moderation tool from ROOST.
Prior to ...)
- TODO: check
+ NOT-FOR-US: Coop
CVE-2026-63393 (OpenSearch SQL supports querying OpenSearch data using SQL and
Piped P ...)
- TODO: check
+ NOT-FOR-US: OpenSearch SQL
CVE-2026-63378 (TAKO AI Agent for Okta is a local-first AI agent that helps
Okta admin ...)
- TODO: check
+ NOT-FOR-US: AKO AI Agent
CVE-2026-63377 (TAKO AI Agent for Okta is a local-first AI agent that helps
Okta admin ...)
- TODO: check
+ NOT-FOR-US: AKO AI Agent
CVE-2026-63346 (Refitter is a tool for generating a C# REST API client using
the Refit ...)
- TODO: check
+ NOT-FOR-US: Refitter
CVE-2026-63345 (Refitter is a tool for generating a C# REST API client using
the Refit ...)
- TODO: check
+ NOT-FOR-US: Refitter
CVE-2026-63344 (Refitter is a tool for generating a C# REST API client using
the Refit ...)
- TODO: check
+ NOT-FOR-US: Refitter
CVE-2026-63341 (Aedes is an MQTT broker that can run on any stream server.
Prior to 1. ...)
- TODO: check
+ NOT-FOR-US: Aedes
CVE-2026-63339 (IXP Manager is a full-stack web application for managing
Internet Exch ...)
- TODO: check
+ NOT-FOR-US: IXP Manager
CVE-2026-63338 (IXP Manager is a full-stack web application for managing
Internet Exch ...)
- TODO: check
+ NOT-FOR-US: IXP Manager
CVE-2026-63224 (OpenRemote is an open-source internet-of-things platform.
Prior to 1.2 ...)
- TODO: check
+ NOT-FOR-US: OpenRemote
CVE-2026-63201 (Netopeer2 is a server for implementing network configuration
managemen ...)
- TODO: check
+ NOT-FOR-US: Netopeer2
CVE-2026-63184 (Refitter is a tool for generating a C# REST API client using
the Refit ...)
- TODO: check
+ NOT-FOR-US: Refitter
CVE-2026-63182 (LightSAML implements SAML 2.0 data model classes, XML
serialization an ...)
- TODO: check
+ NOT-FOR-US: LightSAML
CVE-2026-63121 (Kubewarden policies is a collection of WebAssembly policies
for securi ...)
- TODO: check
+ NOT-FOR-US: Kubewarden policies
CVE-2026-63115 (ActivityPub is a multi-tenant ActivityPub server for Ghost,
built with ...)
- TODO: check
+ NOT-FOR-US: ActivityPub
CVE-2026-62991 (Shopper is a Headless e-commerce Admin Panel. Prior to 2.10.1,
the cus ...)
- TODO: check
+ NOT-FOR-US: Shopper
CVE-2026-62990 (Shopper is a Headless e-commerce Admin Panel. In versions from
2.0.0 p ...)
- TODO: check
+ NOT-FOR-US: Shopper
CVE-2026-62989 (Shopper is a Headless e-commerce Admin Panel. Prior to 2.10.0,
the Var ...)
- TODO: check
+ NOT-FOR-US: Shopper
CVE-2026-62979 (jack lets users share media libraries through their
Radarr/Sonarr stac ...)
TODO: check
CVE-2026-62968 (Dream Displays provides in-game screens for streaming videos
in Minecr ...)
- TODO: check
+ NOT-FOR-US: Dream Displays
CVE-2026-62967 (ZTNET is a ZeroTier web UI for private controllers with
multiuser and ...)
- TODO: check
+ NOT-FOR-US: ZTNET
CVE-2026-62966 (ESPAsyncWebServer is an asynchronous HTTP and WebSocket server
library ...)
- TODO: check
+ NOT-FOR-US: ESPAsyncWebServer
CVE-2026-62965 (SABnzbd is an open source automated Usenet download tool.
Prior to 5.1 ...)
TODO: check
CVE-2026-62958 (libriscv is a RISC-V sandbox and emulator. Prior to 1.18, a
crafted EL ...)
@@ -408,7 +408,7 @@ CVE-2026-78527 (Contributor PHP Object Injection in GS
Testimonial Slider <= 3.3
CVE-2026-76012 (The Photo Gallery, Sliders, Proofing and Themes \u2013 NextGEN
Gallery ...)
NOT-FOR-US: WordPress plugin
CVE-2026-75882 (An improper access control vulnerability in ESET Endpoint
Encryption a ...)
- TODO: check
+ NOT-FOR-US: ESET
CVE-2026-73322 (Incorrect Authorization vulnerability in the single-stage
query engine ...)
NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-73186 (Subscriber PHP Object Injection in Enable Media Replace <=
4.2.2 versi ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/99247e4801effbbb82f1f2702e612ba11d9eec78
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/99247e4801effbbb82f1f2702e612ba11d9eec78
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
