[Git][security-tracker-team/security-tracker][master] Add CVE-2018-3750/node-deep-extend

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d2d4fe7d by Salvatore Bonaccorso at 2018-05-17T09:46:25+02:00
Add CVE-2018-3750/node-deep-extend

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -19844,8 +19844,11 @@ CVE-2018-3752
 	RESERVED
 CVE-2018-3751
 	RESERVED
-CVE-2018-3750
+CVE-2018-3750 [Prototype pollution can allow attackers to modify object properties]
 	RESERVED
+	- node-deep-extend <unfixed> (unimportant)
+	NOTE: https://nodesecurity.io/advisories/612
+	NOTE: nodejs not covered by security support
 CVE-2018-3749
 	RESERVED
 CVE-2018-3748



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/d2d4fe7d9a8ed1a30737d8fcd4bc9d789098487b

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/d2d4fe7d9a8ed1a30737d8fcd4bc9d789098487b
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180517/1b4a862a/attachment-0001.html>