Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
fe3911a2 by Salvatore Bonaccorso at 2026-07-09T07:28:17+02:00
Add two node-immutable issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -192,9 +192,15 @@ CVE-2026-59882 (guzzlehttp/psr7 is a PSR-7 HTTP message
library implementation i
NOTE: https://github.com/guzzle/psr7/pull/811
NOTE: Fixed by:
https://github.com/guzzle/psr7/commit/ddd64f17d4cc1f7e5ffe6fd2c989ec7221712580
(2.12.3)
CVE-2026-59880 (Immutable.js provides many Persistent Immutable data
structures. Prior ...)
- TODO: check
+ - node-immutable <unfixed>
+ NOTE:
https://github.com/immutable-js/immutable-js/security/advisories/GHSA-xvcm-6775-5m9r
+ NOTE: Fixed by:
https://github.com/immutable-js/immutable-js/commit/3dd7e5655012597a41873e328bf9142a8901527b
(v4.3.9)
+ NOTE: Fixed by:
https://github.com/immutable-js/immutable-js/commit/e51d49fc612ded5ec4dfb94ff294d22074269b0f
(v5.1.8)
CVE-2026-59879 (Immutable.js provides many Persistent Immutable data
structures. Prior ...)
- TODO: check
+ - node-immutable <unfixed>
+ NOTE:
https://github.com/immutable-js/immutable-js/security/advisories/GHSA-v56q-mh7h-f735
+ NOTE: Fixed by:
https://github.com/immutable-js/immutable-js/commit/f0bc997d8eb9886aff2236635aa210a95a04304a
(v4.3.9)
+ NOTE: Fixed by:
https://github.com/immutable-js/immutable-js/commit/a1a1ee412dcaa380ab325196283d06594ffe4b84
(v5.1.8)
CVE-2026-59877 (protobufjs compiles protobuf definitions into JavaScript (JS)
function ...)
TODO: check
CVE-2026-59876 (protobufjs compiles protobuf definitions into JavaScript (JS)
function ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fe3911a247734727a1b854d386fa9e12cd93b031
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fe3911a247734727a1b854d386fa9e12cd93b031
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
