Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
3b9e6eff by Salvatore Bonaccorso at 2025-06-03T08:30:17+02:00
Add CVE-2025-48387/node-tar-fs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -70,7 +70,9 @@ CVE-2025-48495 (Gokapi is a self-hosted file sharing server
with automatic expir
CVE-2025-48494 (Gokapi is a self-hosted file sharing server with automatic
expiration ...)
NOT-FOR-US: Gokapi
CVE-2025-48387 (tar-fs provides filesystem bindings for tar-stream. Versions
prior to ...)
- TODO: check
+ - node-tar-fs <unfixed>
+ NOTE:
https://github.com/mafintosh/tar-fs/security/advisories/GHSA-8cj5-5rvv-wf4v
+ NOTE: Fixed by:
https://github.com/mafintosh/tar-fs/commit/647447b572bc135c41035e82ca7b894f02b17f0f
(v3.0.9)
CVE-2025-47585 (Missing Authorization vulnerability in Mage people team
Booking and Re ...)
NOT-FOR-US: WordPress plugin
CVE-2025-47289 (CE Phoenix is a free, open-source eCommerce platform. A stored
cross-s ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3b9e6effdf3ee8d80509ca499f2aae90f575d4f9
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3b9e6effdf3ee8d80509ca499f2aae90f575d4f9
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
