Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a355981d by Salvatore Bonaccorso at 2026-09-29T08:36:27+02:00
Add new batch of node-axios issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -337,27 +337,61 @@ CVE-2026-101910 (ip-address is a library for parsing and
manipulating IPv4 and I
NOTE:
https://github.com/beaugunderson/ip-address/security/advisories/GHSA-2vr4-cq9g-pvrc
NOTE: Fixed by:
https://github.com/beaugunderson/ip-address/commit/ab3dc88bcf5374344168a2ba075ca7ac4ff257f8
(v10.5.1)
CVE-2026-101909 (Axios is a promise-based HTTP client for the browser and
Node.js. From ...)
- TODO: check
+ - node-axios 1.20.0-1
+ NOTE:
https://github.com/axios/axios/security/advisories/GHSA-x97p-jq2g-jp4f
+ NOTE: https://github.com/axios/axios/pull/11141
+ NOTE: Fixed by:
https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a
(v1.20.0)
+ NOTE: Fixed by:
https://github.com/axios/axios/commit/d29be181f85f6fe93397a07b1f69606d9622637b
(v0.34.0)
CVE-2026-101908 (Axios is a promise-based HTTP client for the browser and
Node.js. From ...)
- TODO: check
+ - node-axios 1.20.0-1
+ NOTE:
https://github.com/axios/axios/security/advisories/GHSA-vh66-26gq-q6x8
+ NOTE: https://github.com/axios/axios/pull/11141
+ NOTE: Fixed by:
https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a
(v1.20.0)
CVE-2026-101907 (Axios is a promise-based HTTP client for the browser and
Node.js. From ...)
- TODO: check
+ - node-axios 1.20.0-1
+ NOTE:
https://github.com/axios/axios/security/advisories/GHSA-r4gj-5m52-g5wh
+ NOTE: https://github.com/axios/axios/pull/11141
+ NOTE: Fixed by:
https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a
(v1.20.0)
CVE-2026-101906 (Axios is a promise-based HTTP client for the browser and
Node.js. From ...)
- TODO: check
+ - node-axios 1.20.0-1
+ NOTE:
https://github.com/axios/axios/security/advisories/GHSA-mghh-pgcx-3jjj
+ NOTE: https://github.com/axios/axios/pull/11141
+ NOTE: Fixed by:
https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a
(v1.20.0)
CVE-2026-101905 (Axios is a promise-based HTTP client for the browser and
Node.js. From ...)
- TODO: check
+ - node-axios 1.20.0-1
+ NOTE:
https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3
+ NOTE: https://github.com/axios/axios/pull/11141
+ NOTE: Fixed by:
https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a
(v1.20.0)
CVE-2026-101904 (Axios is a promise-based HTTP client for the browser and
Node.js. From ...)
- TODO: check
+ - node-axios 1.20.0-1
+ NOTE:
https://github.com/axios/axios/security/advisories/GHSA-j8rh-479h-cp32
+ NOTE: https://github.com/axios/axios/pull/11141
+ NOTE: Fixed by:
https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a
(v1.20.0)
CVE-2026-101903 (Axios is a promise-based HTTP client for the browser and
Node.js. From ...)
- TODO: check
+ - node-axios 1.20.0-1
+ NOTE:
https://github.com/axios/axios/security/advisories/GHSA-c29m-xwm3-cm6r
+ NOTE: https://github.com/axios/axios/pull/11141
+ NOTE: Fixed by:
https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a
(v1.20.0)
CVE-2026-101902 (Axios is a promise-based HTTP client for the browser and
Node.js. From ...)
- TODO: check
+ - node-axios 1.20.0-1
+ NOTE:
https://github.com/axios/axios/security/advisories/GHSA-9fr6-4gfg-395g
+ NOTE: https://github.com/axios/axios/pull/11141
+ NOTE: Fixed by:
https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a
(v1.20.0)
CVE-2026-101901 (Axios is a promise-based HTTP client for the browser and
Node.js. From ...)
- TODO: check
+ - node-axios 1.20.0-1
+ NOTE:
https://github.com/axios/axios/security/advisories/GHSA-542g-h47m-68v8
+ NOTE: https://github.com/axios/axios/pull/11141
+ NOTE: Fixed by:
https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a
(v1.20.0)
CVE-2026-101900 (Axios is a promise-based HTTP client for the browser and
Node.js. From ...)
- TODO: check
+ - node-axios 1.20.0-1
+ NOTE:
https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2
+ NOTE: https://github.com/axios/axios/pull/11141
+ NOTE: Fixed by:
https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a
(v1.20.0)
CVE-2026-101898 (Axios is a promise-based HTTP client for the browser and
Node.js. From ...)
- TODO: check
+ - node-axios 1.20.0-1
+ NOTE:
https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v
+ NOTE: https://github.com/axios/axios/pull/11141
+ NOTE: Fixed by:
https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a
(v1.20.0)
CVE-2026-101894 (The decompress package for Node.js extracts archives. Prior
to 10.2.2 ...)
TODO: check
CVE-2026-101891 (An improper access control vulnerability in an internal API
service on ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a355981dd495186b9c7f33d2d2bac00de76ef063
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a355981dd495186b9c7f33d2d2bac00de76ef063
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
