[Git][security-tracker-team/security-tracker][master] Add CVE-2021-42740/node-shell-quote

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
27d8d067 by Salvatore Bonaccorso at 2021-10-31T09:05:38+01:00
Add CVE-2021-42740/node-shell-quote

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -810,7 +810,8 @@ CVE-2021-42742
 CVE-2021-42741
 	RESERVED
 CVE-2021-42740 (The shell-quote package before 1.7.3 for Node.js allows command inject ...)
-	TODO: check
+	- node-shell-quote <unfixed>
+	NOTE: https://github.com/substack/node-shell-quote/commit/5799416ed454aa4ec9afafc895b4e31760ea1abe (1.7.3)
 CVE-2021-42739 (The firewire subsystem in the Linux kernel through 5.14.13 has a buffe ...)
 	- linux <unfixed>
 	NOTE: https://seclists.org/oss-sec/2021/q2/46



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/27d8d0677faa92ced43e8414b78aa3c2e6b32162

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/27d8d0677faa92ced43e8414b78aa3c2e6b32162
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20211031/d5111780/attachment.htm>