Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
36198609 by Salvatore Bonaccorso at 2026-11-07T09:24:23+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -7,9 +7,9 @@ CVE-2026-97190 (The Advanced Custom Fields (ACF\xae) WordPress
plugin before 6.8
CVE-2026-97189 (The Advanced Custom Fields (ACF\xae) WordPress plugin before
6.8.11 do ...)
NOT-FOR-US: WordPress plugin
CVE-2026-94619 (FileGator is a multi-user file manager. Prior to 7.15.0, POST
/upload ...)
- TODO: check
+ NOT-FOR-US: FileGator
CVE-2026-94618 (FileGator is a multi-user file manager. Prior to 7.15.0, GET
/batchdow ...)
- TODO: check
+ NOT-FOR-US: FileGator
CVE-2026-93902 (The Soledad theme for WordPress is vulnerable to Stored
Cross-Site Scr ...)
NOT-FOR-US: WordPress plugin
CVE-2026-93779 (The Tutor LMS \u2013 eLearning and online course solution
plugin for W ...)
@@ -21,11 +21,11 @@ CVE-2026-93370 (The Paystack WooCommerce Payment Gateway
plugin for WordPress is
CVE-2026-87112 (The QA Assistants \u2013 Driven by data plugin for WordPress
is vulner ...)
NOT-FOR-US: WordPress plugin
CVE-2026-86044 (JupyterLab Desktop is the cross-platform desktop application
for Jupyt ...)
- TODO: check
+ NOT-FOR-US: JupyterLab Desktop
CVE-2026-86005 (Chartbrew is an open-source web application that can connect
directly ...)
NOT-FOR-US: Chartbrew
CVE-2026-85737 (Velociraptor is a tool for collecting host-based state
information usi ...)
- TODO: check
+ NOT-FOR-US: Rapid7
CVE-2026-85736 (Chartbrew is an open-source web application that can connect
directly ...)
NOT-FOR-US: Chartbrew
CVE-2026-85726 (Chartbrew is an open-source web application that can connect
directly ...)
@@ -737,13 +737,13 @@ CVE-2026-102657 (esm.sh is a no-build content delivery
network (CDN) for web dev
CVE-2026-102610 (fast-agent is a framework for building, running, and
evaluating AI age ...)
TODO: check
CVE-2026-102530 (JupyterLab Desktop is the cross-platform desktop application
for Jupyt ...)
- TODO: check
+ NOT-FOR-US: JupyterLab Desktop
CVE-2026-102344 (Lavish is the new editor for your HTML artifacts. Prior to
0.1.43, the ...)
TODO: check
CVE-2025-55002 (JupyterLab Desktop is the cross-platform desktop application
for Jupyt ...)
- TODO: check
+ NOT-FOR-US: JupyterLab Desktop
CVE-2025-54991 (JupyterLab Desktop is the cross-platform desktop application
for Jupyt ...)
- TODO: check
+ NOT-FOR-US: JupyterLab Desktop
CVE-2025-15708 (The Live Composer WordPress plugin before 2.1.23 does not
sanitise an ...)
NOT-FOR-US: WordPress plugin
CVE-2026-123766
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/36198609d25700b726d26ed107d33f0419a7e1d9
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/36198609d25700b726d26ed107d33f0419a7e1d9
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
