Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
8e3b7e05 by Salvatore Bonaccorso at 2018-05-30T22:36:46+02:00
CVE-2015-9244/node-mysql assigned
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -35419,8 +35419,6 @@ CVE-2016-10519
RESERVED
CVE-2016-10518
RESERVED
-CVE-2015-9244 (Keys of objects in mysql node module v2.0.0-alpha7 and earlier
are not ...)
- TODO: check
CVE-2015-9243 (When server level, connection level or route level CORS
configurations ...)
TODO: check
CVE-2015-9242 (Certain input strings when passed to new Date() or Date.parse()
in ...)
@@ -105828,7 +105826,7 @@ CVE-2015-XXXX [quoteless attributes in templates can
lead to content injection]
NOTE:
https://github.com/janl/mustache.js/commit/378bcca8a5cfe4058f294a3dbb78e8755e8e0da5
NOTE: https://nodesecurity.io/advisories/62
NOTE: Security hardening, not a vulnerability
-CVE-2015-XXXX [SQL injection due to unescaped object keys]
+CVE-2015-9244 [SQL injection due to unescaped object keys]
- node-mysql 2.0.0~alpha8-1 (unimportant)
NOTE: https://github.com/felixge/node-mysql/issues/342
NOTE: https://nodesecurity.io/advisories/66
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/8e3b7e05cd492888f79bc019062c6b8b93703e67
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/8e3b7e05cd492888f79bc019062c6b8b93703e67
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
