Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits: 6b9ce4b6 by Moritz Muehlenhoff at 2023-10-13T13:19:36+02:00 new node-undici issue - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -51,7 +51,10 @@ CVE-2023-5046 (Improper Neutralization of Special Elements used in an SQL Comman CVE-2023-5045 (Improper Neutralization of Special Elements used in an SQL Command ('S ...) NOT-FOR-US: Kayisi CVE-2023-45143 (Undici is an HTTP/1.1 client written from scratch for Node.js. Prior t ...) - TODO: check + - node-undici <unfixed> + NOTE: https://github.com/nodejs/undici/security/advisories/GHSA-wqq4-5wpv-mx2g + NOTE: https://github.com/nodejs/undici/security/advisories/GHSA-q768-x9m6-m9qp + NOTE: https://github.com/nodejs/undici/commit/e041de359221ebeae04c469e8aff4145764e6d76 CVE-2023-45142 (OpenTelemetry-Go Contrib is a collection of third-party packages for O ...) NOT-FOR-US: OpenTelemetry-Go Contrib CVE-2023-45138 (Change Request is an pplication allowing users to request changes on a ...) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6b9ce4b6f00c5b35c77c28cc211d54b8e622ffcd -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6b9ce4b6f00c5b35c77c28cc211d54b8e622ffcd You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits