Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
19b893d4 by Salvatore Bonaccorso at 2026-05-07T10:39:58+02:00
Add two new node-xmldom issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -116,9 +116,13 @@ CVE-2026-41891 (CI4MS is a CodeIgniter 4-based CMS
skeleton that delivers a prod
CVE-2026-41890 (CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a
production ...)
NOT-FOR-US: CI4MS
CVE-2026-41675 (xmldom is a pure JavaScript W3C standard-based (XML DOM Level
2 Core) ...)
- TODO: check
+ - node-xmldom 0.9.10-1
+ NOTE:
https://github.com/xmldom/xmldom/security/advisories/GHSA-x6wf-f3px-wcqx
+ NOTE:
https://github.com/xmldom/xmldom/commit/7207a4b0e0bcc228868075ed991665ef9f73b1c2
(0.9.10)
CVE-2026-41674 (xmldom is a pure JavaScript W3C standard-based (XML DOM Level
2 Core) ...)
- TODO: check
+ - node-xmldom 0.9.10-1
+ NOTE:
https://github.com/xmldom/xmldom/security/advisories/GHSA-f6ww-3ggp-fr8h
+ NOTE:
https://github.com/xmldom/xmldom/commit/372008f9ae0e20fd69f761c7b79e202598267314
(0.9.10)
CVE-2026-41673 (xmldom is a pure JavaScript W3C standard-based (XML DOM Level
2 Core) ...)
TODO: check
CVE-2026-41672 (xmldom is a pure JavaScript W3C standard-based (XML DOM Level
2 Core) ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/19b893d4add29a205d738c632d6d054df86e76d7
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/19b893d4add29a205d738c632d6d054df86e76d7
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits