Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
b40de7df by Salvatore Bonaccorso at 2022-01-25T21:52:23+01:00
Update information on CVE-2021-23450/dojo
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -66802,10 +66802,9 @@ CVE-2021-23452 (This affects all versions of package
x-assign. The global proto
CVE-2021-23451
RESERVED
CVE-2021-23450 (All versions of package dojo are vulnerable to Prototype
Pollution via ...)
- - dojo 1.15.4+dfsg1-1
- [stretch] - dojo <not-affected> (Vulnerable code introduced later)
- NOTE:
https://github.com/dojo/dojo/commit/4c39c14349408fc8274e19b399ffc660512ed07c
+ - dojo <unfixed>
NOTE: https://github.com/advisories/GHSA-m8gw-hjpr-rjv7
+ NOTE: Fixed by:
https://github.com/dojo/dojo/commit/b7b8b279f3e082e9d4b54144fe831bdc77b2e0c9
CVE-2021-23449 (This affects the package vm2 before 3.9.4 via a Prototype
Pollution at ...)
NOT-FOR-US: vm2 JS
NOTE: https://github.com/patriksimek/vm2
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b40de7dfd59f6cc14b52c7d4aa0fc6c884cc6223
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b40de7dfd59f6cc14b52c7d4aa0fc6c884cc6223
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
