[Git][security-tracker-team/security-tracker][master] Mark jquery as removed, got replaced with src:node-jquery

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6c2440e3 by Salvatore Bonaccorso at 2020-05-26T19:41:50+02:00
Mark jquery as removed, got replaced with src:node-jquery

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -6933,12 +6933,12 @@ CVE-2020-11025 (In affected versions of WordPress, a cross-site scripting (XSS)
 CVE-2020-11024 (In Moonlight iOS/tvOS before 4.0.1, the pairing process is vulnerable  ...)
 	NOT-FOR-US: Moonlight iOS/tvOS
 CVE-2020-11023 (In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, pa ...)
-	- jquery <unfixed>
+	- jquery <removed>
 	[jessie] - jquery <not-affected> (Vulnerable code note present)
 	- node-jquery 3.5.0+dfsg-2
 	NOTE: https://github.com/jquery/jquery/security/advisories/GHSA-jpcq-cgw6-v4j6
 CVE-2020-11022 (In jQuery versions greater than or equal to 1.2 and before 3.5.0, pass ...)
-	- jquery <unfixed>
+	- jquery <removed>
 	[jessie] - jquery <not-affected> (Vulnerable code note present)
 	- node-jquery 3.5.0+dfsg-2
 	NOTE: https://github.com/jquery/jquery/security/advisories/GHSA-gxr4-xjj5-5px2
@@ -383774,7 +383774,7 @@ CVE-2007-2381 (The MochiKit framework exchanges data using JavaScript Object Not
 CVE-2007-2380 (The Microsoft Atlas framework exchanges data using JavaScript Object N ...)
 	NOT-FOR-US: Microsoft Atlas
 CVE-2007-2379 (The jQuery framework exchanges data using JavaScript Object Notation ( ...)
-	- jquery <unfixed> (unimportant)
+	- jquery <removed> (unimportant)
 	NOTE: the paper in this reference is a guideline on how to avoid writing unsafe jquery applications. there really isn't anything to fix in the library itself.
 	NOTE: https://www.fortify.com/vulncat/en/vulncat/javascript/javascript_hijacking_ad_hoc_ajax.html
 CVE-2007-2378 (The Google Web Toolkit (GWT) framework exchanges data using JavaScript ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6c2440e30399b7dd9299fe8fec5a6bba62db097b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6c2440e30399b7dd9299fe8fec5a6bba62db097b
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200526/601855ed/attachment-0001.html>