[Git][security-tracker-team/security-tracker][master] Add CVE-2017-16119/node-fresh

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0469c02d by Salvatore Bonaccorso at 2018-06-17T09:06:12+02:00
Add CVE-2017-16119/node-fresh

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -37237,7 +37237,9 @@ CVE-2017-16121 (datachannel-client is a signaling implementation for DataChannel
 CVE-2017-16120 (liyujing is a static file server. liyujing is vulnerable to a ...)
 	TODO: check
 CVE-2017-16119 (Fresh is a module used by the Express.js framework for HTTP response ...)
-	TODO: check
+	- node-fresh <unfixed> (unimportant)
+	NOTE: https://nodesecurity.io/advisories/526
+	NOTE: nodejs not covered by security support
 CVE-2017-16118 (The forwarded module is used by the Express.js framework to handle the ...)
 	TODO: check
 CVE-2017-16117 (slug is a module to slugify strings, even if they contain unicode. ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0469c02d449e50dccbde57382da02a84cb0743bb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0469c02d449e50dccbde57382da02a84cb0743bb
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180617/02c2f488/attachment.html>