Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
7488bb93 by Moritz Muehlenhoff at 2023-09-22T09:02:15+02:00
new node-graphql issue
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -32699,7 +32699,11 @@ CVE-2023-26146
CVE-2023-26145
RESERVED
CVE-2023-26144 (Versions of the package graphql from 16.3.0 and before 16.8.1
are vuln ...)
- TODO: check
+ - node-graphql <unfixed>
+ NOTE: https://security.snyk.io/vuln/SNYK-JS-GRAPHQL-5905181
+ NOTE: https://github.com/graphql/graphql-js/pull/3972
+ NOTE: https://github.com/graphql/graphql-js/issues/3955
+ NOTE:
https://github.com/graphql/graphql-js/commit/f94b511386c7e47bd0380dcd56553dc063320226
CVE-2023-26143 (Versions of the package blamer before 1.0.4 are vulnerable to
Arbitrar ...)
TODO: check
CVE-2023-26142 (All versions of the package crow are vulnerable to HTTP
Response Split ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7488bb93bef5798e1321a108efad46187c4cfa69
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7488bb93bef5798e1321a108efad46187c4cfa69
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
