[Git][security-tracker-team/security-tracker][master] Add CVE-2017-16014/node-http-proxy, itp'ed

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6da26f7c by Salvatore Bonaccorso at 2018-06-17T11:32:15+02:00
Add CVE-2017-16014/node-http-proxy, itp'ed

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -37461,7 +37461,9 @@ CVE-2017-16016 (Sanitize-html is a library for scrubbing html input of malicious
 CVE-2017-16015 (Forms is a library for easily creating HTML forms. Versions before ...)
 	TODO: check
 CVE-2017-16014 (Http-proxy is a proxying library. Because of the way errors are ...)
-	TODO: check
+	- node-http-proxy <itp> (bug #896978)
+	NOTE: https://nodesecurity.io/advisories/323
+	NOTE: https://github.com/nodejitsu/node-http-proxy/pull/101
 CVE-2017-16013 (hapi is a web and services application framework. When hapi >= 15.0.0 ...)
 	TODO: check
 CVE-2017-16012 (Jquery is a javascript library for DOM traversal and manipulation, ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6da26f7cf07df052d46b97d6e9719bfc0ac5b914

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6da26f7cf07df052d46b97d6e9719bfc0ac5b914
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180617/787884f2/attachment.html>