Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
4f4c488e by Salvatore Bonaccorso at 2026-11-05T23:58:59+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -303,17 +303,17 @@ CVE-2026-122151 (A security vulnerability has been
detected in Presenton up to 0
CVE-2026-122146 (A weakness has been identified in 101arrowz fflate up to
0.8.3. This i ...)
NOT-FOR-US: 101arrowz fflate
CVE-2026-122144 (A security flaw has been discovered in nliautaud
pico-content-editor u ...)
- TODO: check
+ NOT-FOR-US: nliautaud pico-content-editor
CVE-2026-122140 (Trawl 1.5.0 before 1.10.0 contains a server-side request
forgery vulne ...)
- TODO: check
+ NOT-FOR-US: Trawl
CVE-2026-122139 (blueprintUE Self-Hosted Edition before 4.3.3 contains an
account enume ...)
- TODO: check
+ NOT-FOR-US: blueprintUE Self-Hosted Edition
CVE-2026-122138 (BlueprintUE Self-Hosted Edition 4.2.0 before 4.3.4 contains a
login ra ...)
- TODO: check
+ NOT-FOR-US: blueprintUE Self-Hosted Edition
CVE-2026-122137 (Powerlevel10k before 1.20.19 contains an insecure temporary
directory ...)
- TODO: check
+ NOT-FOR-US: Powerlevel10k
CVE-2026-122136 (Powerlevel10k before 1.20.19 contains a symlink following
vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: Powerlevel10k
CVE-2026-122135 (Mistral Vibe before 3.0.3 contains a remote code execution
vulnerabili ...)
NOT-FOR-US: Mistral Vibe
CVE-2026-122134 (Mistral Vibe before 2.25.7 contains a remote code execution
vulnerabil ...)
@@ -328,7 +328,7 @@ CVE-2026-122132 (go-chi chi 5.2.2 through 5.5.0 contains an
open redirect vulner
NOTE: https://github.com/go-chi/chi/pull/1238
NOTE: CVE exists because of an incomplete CVE-2025-71405 mitigation
CVE-2026-122131 (Joi 17.13.6 before 17.13.9 and 18.2.5 before 18.3.1 contains
a prototy ...)
- TODO: check
+ NOT-FOR-US: Node joi
CVE-2026-122130 (CESNET ipfixcol2 2.3.0 before 2.9.0 contains an integer
overflow vulne ...)
- ipfixcol2 2.9.0-1
NOTE: Fixed by:
https://github.com/CESNET/ipfixcol2/commit/ad206f6217257b06b139f1b2bce50d52f5bc6acb
(v2.9.0)
@@ -604,7 +604,7 @@ CVE-2026-39431 (On HP Poly EagleEye Cube USB 1.3.1-001267
devices, one of the AP
CVE-2026-39430 (On HP Poly EagleEye Cube USB 1.3.1-001267 devices, the
administrator a ...)
NOT-FOR-US: HP Poly EagleEye Cube USB
CVE-2026-20241 (A vulnerability in the authorization mechanism of Cisco
Identity Servi ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-19731 (Improper Limitation of a Pathname to a Restricted Directory
('Path Tra ...)
NOT-FOR-US: Imzager
CVE-2026-19721 (Improper restriction of XML external entity reference
vulnerability in ...)
@@ -1097,11 +1097,11 @@ CVE-2026-92185 (Quest Foglight for Databases
AbstractParser XML External Entity
CVE-2026-91075 (The Eupago Gateway For Woocommerce WordPress plugin from 4.5.0
through ...)
NOT-FOR-US: WordPress plugin
CVE-2026-89295 (In Eclipse Mnestix AAS Generator versions 0.1.0 up until but
excluding ...)
- TODO: check
+ NOT-FOR-US: Eclipse
CVE-2026-89293 (In Eclipse Mnestix Browser versions 1.2.0 up until but
excluding 2.3.0 ...)
- TODO: check
+ NOT-FOR-US: Eclipse
CVE-2026-89292 (In Eclipse Mnestix Browser versions 1.6.0 up until but
excluding 2.3.0 ...)
- TODO: check
+ NOT-FOR-US: Eclipse
CVE-2026-89229 (Improper Limitation of a Pathname to a Restricted Directory
('Path Tra ...)
NOT-FOR-US: BlueLM Copilot
CVE-2026-88968 (Claude Code is an agentic coding tool. Prior to 2.1.251, the
Edit tool ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4f4c488e4339977b31a4508d0acf3749aa726486
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4f4c488e4339977b31a4508d0acf3749aa726486
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
