Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a8a342db by Salvatore Bonaccorso at 2026-11-03T12:50:06+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -398,15 +398,15 @@ CVE-2026-120689 (HDF5 through 2.2.0 contains an
uncontrolled recursion vulnerabi
NOTE: https://github.com/HDFGroup/hdf5/issues/6403
NOTE: HDF not covered by security support, see
https://bugs.debian.org/1117722
CVE-2026-120656 (OpenKruise kruise-manager exposes an unauthenticated ppof
endpoint whe ...)
- TODO: check
+ NOT-FOR-US: OpenKruise kruise-manager
CVE-2026-120630 (CrewAI contains an SSRF vulnerability caused by its SSRF
guard and HTT ...)
- TODO: check
+ NOT-FOR-US: CrewAI
CVE-2026-120627 (The Private Internet Access Extension for Firefox contains an
unguarde ...)
- TODO: check
+ NOT-FOR-US: Private Internet Access Extension for Firefox
CVE-2026-120597 (A vulnerability was identified in Welcart e-Commerce Plugin
up to 2.12 ...)
- TODO: check
+ NOT-FOR-US: Welcart e-Commerce Plugin
CVE-2026-120596 (A remotely exploitable denial-of-service vulnerability exists
in the T ...)
- TODO: check
+ NOT-FOR-US: Ethernut / egnite
CVE-2026-120578 (The AI Alt Text Generator plugin for WordPress is vulnerable
to author ...)
NOT-FOR-US: WordPress plugin
CVE-2026-120577 (The FluentCart A New Era of eCommerce \u2013 Faster, Lighter,
and Simp ...)
@@ -438,11 +438,11 @@ CVE-2026-120524 (The News Kit Addons For Elementor plugin
for WordPress is vulne
CVE-2026-120518 (The BuddyPress XProfile Image Field plugin for WordPress is
vulnerable ...)
NOT-FOR-US: WordPress plugin
CVE-2026-120503 (A vulnerability was detected in EchoHS GeekezBrowser up to
1.7.2/1.8.0 ...)
- TODO: check
+ NOT-FOR-US: EchoHS GeekezBrowser
CVE-2026-120501 (An Otter Wiki 2.20.1 before 2.26.2 contains a file disclosure
vulnerab ...)
- TODO: check
+ NOT-FOR-US: Otter Wiki
CVE-2026-120500 (An Otter Wiki before 2.26.2 contains a stored cross-site
scripting vul ...)
- TODO: check
+ NOT-FOR-US: Otter Wiki
CVE-2026-120497 (Stored cross-site scripting (XSS) in the HTML report
generator in the ...)
NOT-FOR-US: Amazon
CVE-2026-120492 (Chainlit 2.12.0 contains a server-side request forgery
vulnerability t ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a8a342db1826bda75ab17dba7479bc48ac209428
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a8a342db1826bda75ab17dba7479bc48ac209428
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
