Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
9eaf7459 by Salvatore Bonaccorso at 2025-05-13T22:44:22+02:00
Add CVE-2025-47278/flask
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -17,7 +17,11 @@ CVE-2025-4427 (An authentication bypass in the API component
of Ivanti Endpoint
CVE-2025-47280 (Umbraco Forms is a form builder that integrates with the
Umbraco conte ...)
TODO: check
CVE-2025-47278 (Flask is a web server gateway interface (WSGI) web application
framewo ...)
- TODO: check
+ - flask <unfixed>
+ [bookworm] - flask <not-affected> (Vulnerable code introduced later)
+ [bullseye] - flask <not-affected> (Vulnerable code introduced later)
+ NOTE:
https://github.com/pallets/flask/security/advisories/GHSA-4grg-w6v8-c28g
+ NOTE: Fixed by:
https://github.com/pallets/flask/commit/73d6504063bfa00666a92b07a28aaf906c532f09
(3.1.1)
CVE-2025-47276 (Actualizer is a single shell script solution to allow
developers and e ...)
TODO: check
CVE-2025-47204 (An issue was discovered in post.php in bootstrap-multiselect
(aka Boot ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9eaf74591966376eaf7da0651f2998eafbfc361d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9eaf74591966376eaf7da0651f2998eafbfc361d
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
