[Git][security-tracker-team/security-tracker][master] "new" node-ws issue

[Moritz Muehlenhoff]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
64d6c933 by Moritz Muehlenhoff at 2018-07-15T23:52:44+02:00
"new" node-ws issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -42067,7 +42067,9 @@ CVE-2016-10520 (jadedown is vulnerable to regular expression denial of service (
 CVE-2016-10519 (A security issue was found in bittorrent-dht before 5.1.3 that allows ...)
 	NOT-FOR-US: bittorrent-dht
 CVE-2016-10518 (A vulnerability was found in the ping functionality of the ws module ...)
-	TODO: check
+	- node-ws 1.0.1+ds1.e6ddaae4-1 (unimportant)
+	NOTE: https://nodesecurity.io/advisories/67
+	NOTE: Nodefs not covered by security support
 CVE-2015-9243 (When server level, connection level or route level CORS configurations ...)
 	TODO: check
 CVE-2015-9242 (Certain input strings when passed to new Date() or Date.parse() in ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/64d6c93312fc333573b13ec754673c2f68202810

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/64d6c93312fc333573b13ec754673c2f68202810
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180715/727a9d57/attachment.html>