Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
282a92e5 by Salvatore Bonaccorso at 2026-11-02T09:49:18+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -187,35 +187,35 @@ CVE-2026-120324 (A weakness has been identified in
Aklivity Zilla up to 1.3.4/2.
CVE-2026-120323 (A security flaw has been discovered in samanhappy MCPHub up
to 1.0.45/ ...)
NOT-FOR-US: MCPHub
CVE-2026-120322 (A vulnerability was identified in Termix-SSH Termix up to
2.9.2. This ...)
- TODO: check
+ NOT-FOR-US: Termix
CVE-2026-120320 (A vulnerability was determined in jxxghp MoviePilot up to
3.1.2. This ...)
- TODO: check
+ NOT-FOR-US: jxxghp MoviePilot
CVE-2026-120319 (A vulnerability was found in Sanluan PublicCMS 4.x/5.x/6.x.
This affec ...)
- TODO: check
+ NOT-FOR-US: Sanluan PublicCMS
CVE-2026-120317 (http4k from 4.9.10.0 before 6.60.0.0 contains a missing
integrity chec ...)
- TODO: check
+ NOT-FOR-US: http4k
CVE-2026-120316 (http4k before 6.62.0.0-ee contains a path traversal
vulnerability in T ...)
- TODO: check
+ NOT-FOR-US: http4k
CVE-2026-120315 (LobeHub Chat from 1.84.26 before 2.1.49 contains a path
traversal vuln ...)
- TODO: check
+ NOT-FOR-US: LobeHub Chat
CVE-2026-120314 (Network-AI from 5.14.0 before 5.15.5 contains a missing
authentication ...)
- TODO: check
+ NOT-FOR-US: Network-AI
CVE-2026-120313 (Network-AI before 5.15.5 contains a path traversal
vulnerability in In ...)
- TODO: check
+ NOT-FOR-US: Network-AI
CVE-2026-120312 (Network-AI from 5.13.4 before 5.15.5 contains a path
traversal vulnera ...)
- TODO: check
+ NOT-FOR-US: Network-AI
CVE-2026-120311 (Network-AI from 5.13.4 before 5.15.5 contains a path
traversal vulnera ...)
- TODO: check
+ NOT-FOR-US: Network-AI
CVE-2026-120310 (Parse Server before 8.6.109 and 9.0.0 before 9.10.6-alpha.1
returns st ...)
NOT-FOR-US: Parse Server
CVE-2026-120309 (Nuxt from 4.6.0 before 4.6.2 contains a route parameter
confusion vuln ...)
- TODO: check
+ NOT-FOR-US: Nuxt
CVE-2026-120308 (A Beta9 tenant can attach a volume when deploying a function,
endpoint ...)
- TODO: check
+ NOT-FOR-US: Beta9
CVE-2026-120307 (The Beta9 worker serves the sandbox file API from outside the
containe ...)
- TODO: check
+ NOT-FOR-US: Beta9
CVE-2026-120306 (Beta9 turns each shell command in a tenant image definition
into a Doc ...)
- TODO: check
+ NOT-FOR-US: Beta9
CVE-2026-120283 (A vulnerability was identified in Linksys E8450
1.2.00.360516. Affecte ...)
NOT-FOR-US: Linksys
CVE-2026-120282 (A vulnerability was determined in WAVLINK WN536AX6-A V260507.
This imp ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/282a92e52121c9cc230e08c01a93f06e3efcc3f7
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/282a92e52121c9cc230e08c01a93f06e3efcc3f7
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
