Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
633ac892 by Moritz Muehlenhoff at 2026-09-30T19:32:59+02:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,5 @@
+CVE-2026-74246
+ NOT-FOR-US: Red Hat Quay
CVE-2026-97316 (The Broken Link Notifier WordPress plugin before 2.0.0.1 does
not re-v ...)
NOT-FOR-US: WordPress plugin
CVE-2026-97196 (Improper Validation of Unsafe Equivalence in Input
vulnerability in Li ...)
@@ -232,39 +234,39 @@ CVE-2026-11415
CVE-2026-103111 (PCRE2 before 10.49, when there is an attacker-controlled
regular expre ...)
TODO: check
CVE-2026-103110 (Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is
affected by i ...)
- TODO: check
+ NOT-FOR-US: Pexip Infinity
CVE-2026-103109 (Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is
affected by i ...)
- TODO: check
+ NOT-FOR-US: Pexip Infinity
CVE-2026-103108 (Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is
affected by ...)
- TODO: check
+ NOT-FOR-US: Pexip Infinity
CVE-2026-103106 (Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is
affected by ...)
- TODO: check
+ NOT-FOR-US: Pexip Infinity
CVE-2026-103105 (Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is
affected by i ...)
- TODO: check
+ NOT-FOR-US: Pexip Infinity
CVE-2026-103104 (Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is
affected by i ...)
- TODO: check
+ NOT-FOR-US: Pexip Infinity
CVE-2026-103102 (Pexip Infinity before 41.0 is affected by improper input
validation in ...)
- TODO: check
+ NOT-FOR-US: Pexip Infinity
CVE-2026-103101 (Pexip Infinity 30.0 through 40.x before 41.0 is affected by
improper i ...)
- TODO: check
+ NOT-FOR-US: Pexip Infinity
CVE-2026-103100 (Pexip Infinity before 40.1 is affected by improper input
validation in ...)
- TODO: check
+ NOT-FOR-US: Pexip Infinity
CVE-2026-103099 (Pexip Infinity before 41.1 is affected by improper input
validation in ...)
- TODO: check
+ NOT-FOR-US: Pexip Infinity
CVE-2026-103088 (Handlebars.java before 4.5.5 allows directory traversal. In
handlebars ...)
TODO: check
CVE-2026-103087 (Uncontrolled recursion in the Gosub browser engine
(gosub-engine) thro ...)
TODO: check
CVE-2026-103057 (AiSOC versions 5.1.0 before 12.0.0 contain an authentication
bypass vu ...)
- TODO: check
+ NOT-FOR-US: AiSOC
CVE-2026-103056 (AiSOC versions 7.2.0 before 12.0.0 contain a command
injection vulnera ...)
- TODO: check
+ NOT-FOR-US: AiSOC
CVE-2026-103055 (AiSOC versions 7.5.0 before 12.0.0 use a hard-coded constant
for JWT v ...)
- TODO: check
+ NOT-FOR-US: AiSOC
CVE-2026-103054 (AiSOC versions before 12.0.0 contain an authorization bypass
vulnerabi ...)
- TODO: check
+ NOT-FOR-US: AiSOC
CVE-2026-103053 (AiSOC versions 9.0.0 before 12.0.0 fail to enforce
authentication on t ...)
- TODO: check
+ NOT-FOR-US: AiSOC
CVE-2026-103051 (Improper neutralization of input during web page generation
('cross-si ...)
TODO: check
CVE-2026-103050 (Improper neutralization of input during web page generation
('cross-si ...)
@@ -284,11 +286,11 @@ CVE-2026-103044 (XML injection (aka blind XPath
injection) vulnerability in The
CVE-2026-103043 (anchorme through 3.0.8 contains a regular expression denial
of service ...)
TODO: check
CVE-2026-103042 (LightLLM through 1.2.0 contains a memory exhaustion
vulnerability in t ...)
- TODO: check
+ NOT-FOR-US: LightLLM
CVE-2026-103041 (LightLLM through 1.2.0 multimodal deployments expose an
unauthenticate ...)
- TODO: check
+ NOT-FOR-US: LightLLM
CVE-2026-103040 (LightLLM through 1.2.0 contains a remote code execution
vulnerability ...)
- TODO: check
+ NOT-FOR-US: LightLLM
CVE-2026-102938 (virtualenv is a tool for creating isolated virtual python
environments ...)
TODO: check
CVE-2026-102937 (virtualenv is a tool for creating isolated virtual python
environments ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/633ac8926b6d7be04a5f53e04277c6fccc2d0af8
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/633ac8926b6d7be04a5f53e04277c6fccc2d0af8
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
