Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
45a17e2a by Salvatore Bonaccorso at 2023-05-02T23:29:57+02:00
Add CVE-2023-30861/flask
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1439,7 +1439,10 @@ CVE-2023-2168 (The TaxoPress plugin for WordPress is
vulnerable to Stored Cross-
CVE-2023-2167
RESERVED
CVE-2023-30861 (Flask is a lightweight WSGI web application framework. When
all of the ...)
- TODO: check
+ - flask <unfixed>
+ NOTE:
https://github.com/pallets/flask/security/advisories/GHSA-m2qf-hxjv-5gpq
+ NOTE:
https://github.com/pallets/flask/commit/8646edca6f47e2cd57464081b3911218d4734f8d
(2.2.5)
+ NOTE:
https://github.com/pallets/flask/commit/8705dd39c4fa563ea0fe0bf84c85da8fcc98b88d
(2.3.2)
CVE-2023-30860
RESERVED
CVE-2023-30859 (Triton is a Minecraft plugin for Spigot and BungeeCord that
helps you ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/45a17e2a41a773492170d2e4a6ea38924dfb0bbb
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/45a17e2a41a773492170d2e4a6ea38924dfb0bbb
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits