Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
7ac41b4e by Moritz Muehlenhoff at 2024-04-23T12:31:17+02:00
new flask-cors issue
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -457,7 +457,9 @@ CVE-2024-21872 (The device allows an unauthenticated
attacker to bypass authenti
CVE-2024-21846 (An unauthenticated attacker can reset the board and stop
transmitter ...)
NOT-FOR-US: Electrolink
CVE-2024-1681 (corydolphin/flask-cors is vulnerable to log injection when the
log lev ...)
- TODO: check
+ - python-flask-cors <unfixed>
+ NOTE: https://huntr.com/bounties/25a7a0ba-9fa2-4777-acb6-03e5539bb644
+ NOTE: https://github.com/corydolphin/flask-cors/issues/349
CVE-2024-1491 (The devices allow access to an unprotected endpoint that allows
MPFS ...)
NOT-FOR-US: Electrolink
CVE-2024-1065 (Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel
Driver, Arm ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7ac41b4e03b49d71285707b8895c13cd9eef8833
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7ac41b4e03b49d71285707b8895c13cd9eef8833
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
