Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
de5879c5 by Salvatore Bonaccorso at 2020-07-16T08:36:42+02:00
Add CVE-2020-8178/node-jison-lex
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -20111,7 +20111,8 @@ CVE-2020-8180 (A too lax check in Nextcloud Talk 6.0.4,
7.0.2 and 8.0.7 allowed
CVE-2020-8179 (Improper access control in Nextcloud Deck 1.0.0 allowed an
attacker to ...)
NOT-FOR-US: Nextcloud Deck
CVE-2020-8178 (Insufficient input validation in npm package `jison` <=
0.4.18 may ...)
- TODO: check
+ - node-jison-lex <unfixed>
+ NOTE: https://hackerone.com/reports/690010
CVE-2020-8177
RESERVED
- curl <unfixed>
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/de5879c58f35d123fb15ead3bb944c15c9d56ca5
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/de5879c58f35d123fb15ead3bb944c15c9d56ca5
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
