From 924395b239a596dc12f228448bf347104574a3cd Mon Sep 17 00:00:00 2001 From: Classic298 <27028174+Classic298@users.noreply.github.com> Date: Wed, 8 Jul 2026 20:39:17 +0200 Subject: [PATCH] Label rejected dispositions as CNA REJECTED --- docs/security/vendor-dispositions/index.mdx | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/docs/security/vendor-dispositions/index.mdx b/docs/security/vendor-dispositions/index.mdx index e73a8d18..6aa30c4b 100644 --- a/docs/security/vendor-dispositions/index.mdx +++ b/docs/security/vendor-dispositions/index.mdx @@ -44,13 +44,13 @@ For a full overview, see the [Security Policy](../security-policy). | CVE | Title | Vendor Disposition | Official Resolution | Published | | :--- | :--- | :--- | :--- | :--- | -| [CVE-2025-15603](./cve-2025-15603) | Insufficiently Random Values in start_windows.bat | Rejected | REJECTED | 2026-03-09 | +| [CVE-2025-15603](./cve-2025-15603) | Insufficiently Random Values in start_windows.bat | Rejected | CNA REJECTED | 2026-03-09 | | [CVE-2026-0765](./cve-2026-0765) | PIP install_frontmatter_requirements Command Injection | Rejected | In progress | 2026-01-23 | | [CVE-2026-0766](./cve-2026-0766) | load_tool_module_by_id Code Injection | Rejected | In progress | 2026-01-23 | | [CVE-2026-0767](./cve-2026-0767) | Cleartext Transmission of Credentials | Rejected | In progress | 2026-01-23 | -| [CVE-2025-63391](./cve-2025-63391) | Authentication Bypass in /api/config | Rejected | REJECTED | 2025-12-18 | +| [CVE-2025-63391](./cve-2025-63391) | Authentication Bypass in /api/config | Rejected | CNA REJECTED | 2025-12-18 | | [CVE-2024-7040](./cve-2024-7040) | Cross-Admin Chat Access via user_id Parameter | Rejected | In progress | 2025-10-15 | -| [CVE-2025-29446](./cve-2025-29446) | SSRF in verify_connection | Rejected | REJECTED | 2025-04-21 | +| [CVE-2025-29446](./cve-2025-29446) | SSRF in verify_connection | Rejected | CNA REJECTED | 2025-04-21 | | [CVE-2024-7033](./cve-2024-7033) | Path Traversal in Model Download | Rejected | In progress | 2025-03-20 | | [CVE-2024-7034](./cve-2024-7034) | Path Traversal in Model Upload | Rejected | In progress | 2025-03-20 | | [CVE-2024-7038](./cve-2024-7038) | Path Oracle in Embedding-Model Update | Rejected | In progress | 2024-10-09 |