Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
8381ca09 by Salvatore Bonaccorso at 2026-11-06T16:48:44+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -323,11 +323,11 @@ CVE-2026-55458 (Caddy is an extensible server platform
that uses TLS by default.
NOTE:
https://github.com/caddyserver/caddy/security/advisories/GHSA-8qx7-j2v2-x6q5
NOTE: Fixed by:
https://github.com/caddyserver/caddy/commit/25b3eab6dbd8d2d2670711f26b774e0fd43e1179
(v2.11.5)
CVE-2026-54914 (WebAssembly Micro Runtime (WAMR) is a lightweight standalone
WebAssemb ...)
- TODO: check
+ NOT-FOR-US: WebAssembly Micro Runtime (WAMR)
CVE-2026-54913 (WebAssembly Micro Runtime (WAMR) is a lightweight standalone
WebAssemb ...)
- TODO: check
+ NOT-FOR-US: WebAssembly Micro Runtime (WAMR)
CVE-2026-54912 (WebAssembly Micro Runtime (WAMR) is a lightweight standalone
WebAssemb ...)
- TODO: check
+ NOT-FOR-US: WebAssembly Micro Runtime (WAMR)
CVE-2026-54442 (Emissary is a P2P based data-driven workflow engine. Prior to
8.51.0, ...)
NOT-FOR-US: NSA Emissary
CVE-2026-54146 (OpenHuman is an open-source agent harness available as a
desktop appli ...)
@@ -353,9 +353,9 @@ CVE-2026-49393 (OpenHuman is an open-source agent harness
available as a desktop
CVE-2026-49272 (OAuthLib is an implementation of the OAuth request-signing
logic for P ...)
TODO: check
CVE-2026-48705 (MONAI (Medical Open Network for AI) is an AI toolkit for
health care i ...)
- TODO: check
+ NOT-FOR-US: MONAI (Medical Open Network for AI)
CVE-2026-46350 (dcmjs is a JavaScript implementation of DICOM manipulation.
Prior to 0 ...)
- TODO: check
+ NOT-FOR-US: dcmjs
CVE-2026-44875 (In HPE Cray Programming Environment versions 25.03 and 25.09,
prior to ...)
NOT-FOR-US: HPE
CVE-2026-34157 (Wails is a framework for building desktop applications using
Go and we ...)
@@ -5676,7 +5676,7 @@ CVE-2026-65566 (Cross-Site Request Forgery (CSRF)
vulnerability in Meow Apps AI
CVE-2026-65444 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-64860 (ESP-Protocols is a collection of protocol components for
ESP-IDF. Prio ...)
- TODO: check
+ NOT-FOR-US: ESP-Protocols
CVE-2026-64618 (Improper Neutralization of Special Elements used in an SQL
Command ("S ...)
NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-62303 (Pistache is a high-performance REST toolkit written in C++.
From 0.0.5 ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8381ca09ba64e8e61c1bfecdfed90a07012a3c18
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8381ca09ba64e8e61c1bfecdfed90a07012a3c18
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
