Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
72971db4 by Salvatore Bonaccorso at 2025-10-30T21:23:47+01:00
Add CVE-2025-64118/node-tar
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,7 +1,11 @@
CVE-2025-8850 (In danny-avila/librechat version 0.7.9, there is an insecure
API desig ...)
TODO: check
CVE-2025-64118 (node-tar is a Tar for Node.js. In 7.5.1, using .t (aka .list)
with { s ...)
- TODO: check
+ - node-tar <not-affected> (Vulnerable code not present)
+ NOTE:
https://github.com/isaacs/node-tar/security/advisories/GHSA-29xp-372q-xqph
+ NOTE: https://github.com/isaacs/node-tar/pull/446
+ NOTE: Introduced with:
https://github.com/isaacs/node-tar/commit/5330eb04bc43014f216e5c271b40d5c00d45224d
(v7.5.1)
+ NOTE: Fixed by:
https://github.com/isaacs/node-tar/commit/5e1a8e638600d3c3a2969b4de6a6ec44fa8d74c9
(v7.5.2)
CVE-2025-64116 (Movary is a web application to track, rate and explore your
movie watc ...)
TODO: check
CVE-2025-64115 (Movary is a web application to track, rate and explore your
movie watc ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/72971db4ed2bcd5dca1ca31c23d2a541b8625a52
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/72971db4ed2bcd5dca1ca31c23d2a541b8625a52
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
