Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
28113149 by Salvatore Bonaccorso at 2025-09-12T10:52:36+02:00
Add CVE-2025-58754/node-axios
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -15,7 +15,10 @@ CVE-2025-8280 (The Contact Form 7 reCAPTCHA WordPress plugin
through 1.2.0 does
CVE-2025-58781 (WTW-EAGLE App does not properly validate server certificates,
which ma ...)
NOT-FOR-US: WTW-EAGLE App
CVE-2025-58754 (Axios is a promise based HTTP client for the browser and
Node.js. When ...)
- TODO: check
+ - node-axios <unfixed>
+ NOTE:
https://github.com/axios/axios/security/advisories/GHSA-4hjh-wcwx-xvwj
+ NOTE: https://github.com/axios/axios/pull/7011
+ NOTE:
https://github.com/axios/axios/commit/945435fc51467303768202250debb8d4ae892593
(v1.12.0)
CVE-2025-55319 (Ai command injection in Agentic AI and Visual Studio Code
allows an un ...)
TODO: check
CVE-2025-4974
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/281131495c5a6dd3584c9801221decb9e034bebb
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/281131495c5a6dd3584c9801221decb9e034bebb
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
