Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
4b9a5ac3 by Salvatore Bonaccorso at 2026-09-23T14:05:30+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -360,9 +360,9 @@ CVE-2026-89425
(UTF8DataInputJsonParser._reportInvalidToken() in FasterXML jacks
CVE-2026-89331 (The FluentBoards WordPress plugin before 2.1.0 does not
properly rest ...)
NOT-FOR-US: WordPress plugin
CVE-2026-89282 (The Apache Lounge Windows distribution of Apache HTTP Server
build con ...)
- TODO: check
+ NOT-FOR-US: Apache Lounge Windows distribution
CVE-2026-89281 (The Apache Lounge Windows distribution of Apache HTTP Server
build con ...)
- TODO: check
+ NOT-FOR-US: Apache Lounge Windows distribution
CVE-2026-89019
REJECTED
CVE-2026-88997 (The JSM Show Post Metadata WordPress plugin before 4.9.1 does
not prop ...)
@@ -370,19 +370,19 @@ CVE-2026-88997 (The JSM Show Post Metadata WordPress
plugin before 4.9.1 does no
CVE-2026-88929 (The Product Badge, Label, Countdown Timer for WooCommerce
WordPress p ...)
NOT-FOR-US: WordPress plugin
CVE-2026-88624 (Missing path validation in the Worktree.remove component of
openCode v ...)
- TODO: check
+ NOT-FOR-US: openCode
CVE-2026-88419 (An unrestricted upload of files with a dangerous type in the
thumbnail ...)
- TODO: check
+ NOT-FOR-US: WuzhiCMS
CVE-2026-88418 (CMSimple 5.24 ships with CSRF protection disabled by default,
which tu ...)
- TODO: check
+ NOT-FOR-US: CMSimple
CVE-2026-88416 (MCMS 6.1.1 through 6.2.1 has a SQL injection vulnerability in
the cust ...)
- TODO: check
+ NOT-FOR-US: MCMS
CVE-2026-88350 (An integer overflow vulnerability exists in MPack 1.1.1 in
mpack_node_ ...)
TODO: check
CVE-2026-88345 (An out-of-bounds read vulnerability exists in the schema lexer
of flat ...)
- TODO: check
+ NOT-FOR-US: Dvidelabs flatcc
CVE-2026-88344 (An out-of-bounds read vulnerability exists in the schema lexer
of flat ...)
- TODO: check
+ NOT-FOR-US: Dvidelabs flatcc
CVE-2026-88341 (A reachable assertion vulnerability exists in YARA 4.5.8 when
loading ...)
TODO: check
CVE-2026-88340 (An invalid pointer release vulnerability exists in YARA 4.5.8
during d ...)
@@ -390,7 +390,7 @@ CVE-2026-88340 (An invalid pointer release vulnerability
exists in YARA 4.5.8 du
CVE-2026-88339 (A NULL pointer dereference vulnerability exists in the
gf_sg_vrml_fiel ...)
TODO: check
CVE-2026-88020 (Autonomy Logic OpenPLC 3is susceptible to an improper
neutralization o ...)
- TODO: check
+ NOT-FOR-US: OpenPLC
CVE-2026-87981 (The Paymob for WooCommerce WordPress plugin before 4.1.14 does
not per ...)
NOT-FOR-US: WordPress plugin
CVE-2026-87979 (The Paymob for WooCommerce WordPress plugin before 4.1.14 does
not ver ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4b9a5ac379e038f7bfc20cd4d767a2d0aefd5b46
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4b9a5ac379e038f7bfc20cd4d767a2d0aefd5b46
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
