Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
53f35a21 by Salvatore Bonaccorso at 2026-09-29T21:56:20+02:00
Add CVE-2026-97711/node-serialize-javascript
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -4,7 +4,9 @@ CVE-2026-98164 (In the Linux kernel, the following
vulnerability has been resolv
[bookworm] - linux 6.1.187-1
NOTE:
https://git.kernel.org/linus/0f38453cdb2e17566ccb7c0f3dabd5bd21caca26 (7.2-rc6)
CVE-2026-97711 (Serialize JavaScript serializes JavaScript values to a
superset of JSO ...)
- TODO: check
+ - node-serialize-javascript 7.1.2+~5.0.4-1
+ NOTE:
https://github.com/yahoo/serialize-javascript/security/advisories/GHSA-gfhx-hw2g-v5hg
+ NOTE: Fixed by:
https://github.com/yahoo/serialize-javascript/commit/2bdbaaff9cb8a4639135eb24cfcd383d3fefb534
(v7.1.2)
CVE-2026-97395 (Apache Polaris allows an authenticated principal with
permission to cr ...)
NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-96440 (Improper Limitation of a Pathname to a Restricted
Directory\uff08Path ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/53f35a21b38ac28e30c58a1f5aeb782943acb091
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/53f35a21b38ac28e30c58a1f5aeb782943acb091
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
