Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f8f2228f by Moritz Muehlenhoff at 2026-10-08T12:43:09+02:00
new node-traverse issue
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -241,7 +241,10 @@ CVE-2026-107355
CVE-2026-107354
REJECTED
CVE-2026-107353 (traverse (npm) versions 0.3.6 through 0.3.9, 0.4.0 through
0.4.6, 0.5. ...)
- TODO: check
+ - node-traverse <unfixed>
+ NOTE:
https://github.com/ljharb/js-traverse/security/advisories/GHSA-rj28-8w7x-jmqc
+ NOTE:
https://github.com/ljharb/js-traverse/commit/81ccab43e379cf42eb2a5f689630f7f79b3d71b8
(v0.6.12)
+ NOTE:
https://github.com/ljharb/js-traverse/commit/37a9ebd103d2a259c824c29cdcc3f0dfe1acffce
(v0.6.12)
CVE-2026-107352 (Missing authorization checks in Amazon Athena engine version
3 request ...)
NOT-FOR-US: Amazon
CVE-2026-107315 (pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 through
42.7.13 pa ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f8f2228fbd71b7a8b5a604d1a9476481c1caea32
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f8f2228fbd71b7a8b5a604d1a9476481c1caea32
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
