[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2020-28168/node-axios

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
412a57dd by Salvatore Bonaccorso at 2020-12-25T20:41:16+01:00
Track fixed version for CVE-2020-28168/node-axios

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -11905,7 +11905,7 @@ CVE-2020-28170
 CVE-2020-28169 (The td-agent-builder plugin before 2020-12-18 for Fluentd allows attac ...)
 	NOT-FOR-US: Fluentd plugin
 CVE-2020-28168 (Axios NPM package 0.21.0 contains a Server-Side Request Forgery (SSRF) ...)
-	- node-axios <unfixed> (bug #975305)
+	- node-axios 0.21.1+dfsg-1 (bug #975305)
 	[buster] - node-axios <no-dsa> (Minor issue)
 	NOTE: https://github.com/axios/axios/issues/3369
 CVE-2020-28167



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/412a57dd0dd2fb8408f024511297d162ecbba01a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/412a57dd0dd2fb8408f024511297d162ecbba01a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201225/916a1fb4/attachment.html>