Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0dddab14 by Salvatore Bonaccorso at 2026-06-19T14:42:37+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -58,7 +58,7 @@ CVE-2026-56075 (PraisonAI before 4.5.128 contains an
arbitrary shell command exe
CVE-2026-56074 (PraisonAI before 1.5.128 caches tool approval decisions by
tool name o ...)
NOT-FOR-US: PraisonAI
CVE-2026-54414 (FileRise before 3.16.0 is vulnerable to path traversal in the
shared-f ...)
- TODO: check
+ NOT-FOR-US: FileRise
CVE-2026-54130 (Missing authentication for critical function in M365 Copilot
allows an ...)
NOT-FOR-US: Microsoft
CVE-2026-54017 (Open WebUI is a self-hosted artificial intelligence platform
designed ...)
@@ -70,23 +70,23 @@ CVE-2026-50034 (An attacker within BLE communication range
can passively interce
CVE-2026-4328 (The Advanced Import plugin for WordPress is vulnerable to
Server-Side ...)
NOT-FOR-US: WordPress plugin
CVE-2026-49454 (Relyra is a strict-by-default SAML 2.0 Service Provider
library for El ...)
- TODO: check
+ NOT-FOR-US: relyra
CVE-2026-49257 (mcp-pinot is a Python-based Model Context Protocol (MCP)
server for in ...)
NOT-FOR-US: mcp-pinot
CVE-2026-49252 (deepstream is a server that allows clients and backend
services to syn ...)
- TODO: check
+ NOT-FOR-US: deepstream
CVE-2026-49248 (OneDev is a Git server with CI/CD, kanban, and packages. In
versions 1 ...)
- TODO: check
+ NOT-FOR-US: OneDev
CVE-2026-49205 (phpMyFAQ is an open source FAQ web application. Versions prior
to 4.1 ...)
NOT-FOR-US: phpMyFAQ
CVE-2026-48983 (pam_usb provides hardware authentication for Linux using
ordinary remo ...)
- TODO: check
+ NOT-FOR-US: pam_usb
CVE-2026-48982 (pam_usb provides hardware authentication for Linux using
ordinary remo ...)
- TODO: check
+ NOT-FOR-US: pam_usb
CVE-2026-48981 (pam_usb provides hardware authentication for Linux using
ordinary remo ...)
- TODO: check
+ NOT-FOR-US: pam_usb
CVE-2026-48980 (pam_usb provides hardware authentication for Linux using
removable med ...)
- TODO: check
+ NOT-FOR-US: pam_usb
CVE-2026-48716 (nanobot is a personal AI assistant. In versions 0.1.5.post3
and prior, ...)
NOT-FOR-US: nanobot
CVE-2026-47847 (Bitnami MariaDB Galera container images and Helm chart are
affected by ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0dddab149ba05c5c727a1b37d62d28d44a6db103
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0dddab149ba05c5c727a1b37d62d28d44a6db103
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
