Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
48de8bd7 by Salvatore Bonaccorso at 2025-01-29T22:18:22+01:00
Add CVE-2024-57965/node-axios
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -29,7 +29,10 @@ CVE-2025-0617 (An attacker with access to an HX 10.0.0 and
previous versions, m
CVE-2025-0353 (The Divi Torque Lite \u2013 Best Divi Addon, Extensions,
Modules & Soc ...)
NOT-FOR-US: WordPress plugin
CVE-2024-57965 (In axios before 1.7.8, lib/helpers/isURLSameOrigin.js does not
use a U ...)
- TODO: check
+ - node-axios <unfixed>
+ NOTE: https://github.com/axios/axios/issues/6351
+ NOTE:
https://github.com/axios/axios/commit/0a8d6e19da5b9899a2abafaaa06a75ee548597db
(v1.7.8)
+ NOTE: https://github.com/axios/axios/pull/6714
CVE-2024-57439 (An issue in the reset password interface of ruoyi v4.8.0
allows attack ...)
NOT-FOR-US: ruoyi
CVE-2024-57438 (Insecure permissions in RuoYi v4.8.0 allows authenticated
attackers to ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/48de8bd7db754cac6a435bd417b227f5157e880b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/48de8bd7db754cac6a435bd417b227f5157e880b
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
