Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
1bfdec88 by Salvatore Bonaccorso at 2023-10-31T10:31:35+01:00
Add CVE-2019-25155/dompurify.js
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -65,7 +65,8 @@ CVE-2023-36263 (Prestashop opartlimitquantity 1.4.5 and
before is vulnerable to
CVE-2023-31794 (MuPDF v1.21.1 was discovered to contain an infinite recursion
in the c ...)
TODO: check
CVE-2019-25155 (DOMPurify before 1.0.11 allows reverse tabnabbing in
demos/hooks-targe ...)
- TODO: check
+ - dompurify.js <removed>
+ NOTE: https://github.com/cure53/DOMPurify/pull/337
CVE-2015-20110 (JHipster generator-jhipster before 2.23.0 allows a timing
attack again ...)
NOT-FOR-US: JHipster generator-jhipster
CVE-2023-34049 [allows an attacker to force Salt-SSH to run their script]
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1bfdec88f3398794d519c292aa9e82d18aad5111
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1bfdec88f3398794d519c292aa9e82d18aad5111
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
