Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
8f7bcf30 by Salvatore Bonaccorso at 2026-09-28T22:31:49+02:00
Add new node-ip-address issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -238,13 +238,21 @@ CVE-2026-12264 (Zohocorp ManageEngine DDI Central
versions before 6201 are vulne
CVE-2026-102010 (A flaw was found in GCC. When an application calls the
erase_if functi ...)
TODO: check
CVE-2026-101913 (ip-address is a library for parsing and manipulating IPv4 and
IPv6 add ...)
- TODO: check
+ - node-ip-address 10.7.2-1
+ NOTE:
https://github.com/beaugunderson/ip-address/security/advisories/GHSA-rpw4-54j3-4h4q
+ NOTE: Fixed by:
https://github.com/beaugunderson/ip-address/commit/d03e960c7cc3179ef25c8a44b4f94dd499625546
(v10.5.1)
CVE-2026-101912 (ip-address is a library for parsing and manipulating IPv4 and
IPv6 add ...)
- TODO: check
+ - node-ip-address 10.7.2-1
+ NOTE:
https://github.com/beaugunderson/ip-address/security/advisories/GHSA-j6r3-76f7-8jcv
+ NOTE: Fixed by:
https://github.com/beaugunderson/ip-address/commit/1343629d57fea413644a5c9d41ff1e59619f3f28
(v10.7.1)
CVE-2026-101911 (ip-address is a library for parsing and manipulating IPv4 and
IPv6 add ...)
- TODO: check
+ - node-ip-address 10.7.2-1
+ NOTE:
https://github.com/beaugunderson/ip-address/security/advisories/GHSA-h3mg-xc3c-68pw
+ NOTE: Fixed by:
https://github.com/beaugunderson/ip-address/commit/469ead1231b4cc059f2150c626e1e0c2895c0134
(v10.7.1)
CVE-2026-101910 (ip-address is a library for parsing and manipulating IPv4 and
IPv6 add ...)
- TODO: check
+ - node-ip-address 10.7.2-1
+ NOTE:
https://github.com/beaugunderson/ip-address/security/advisories/GHSA-2vr4-cq9g-pvrc
+ NOTE: Fixed by:
https://github.com/beaugunderson/ip-address/commit/ab3dc88bcf5374344168a2ba075ca7ac4ff257f8
(v10.5.1)
CVE-2026-101909 (Axios is a promise-based HTTP client for the browser and
Node.js. From ...)
TODO: check
CVE-2026-101908 (Axios is a promise-based HTTP client for the browser and
Node.js. From ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8f7bcf30f7037ff6cb102d3899d224b613cae5dd
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8f7bcf30f7037ff6cb102d3899d224b613cae5dd
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
