[Git][security-tracker-team/security-tracker][master] CVE-2021-23440/node-set-value #994448

[Neil Williams (@codehelp)]

Neil Williams pushed to branch master at Debian Security Tracker / security-tracker


Commits:
37fd4b89 by Neil Williams at 2021-09-16T09:03:07+01:00
CVE-2021-23440/node-set-value #994448

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -42734,7 +42734,10 @@ CVE-2021-23442
 CVE-2021-23441
 	RESERVED
 CVE-2021-23440 (This affects the package set-value before 4.0.1. A type confusion vuln ...)
-	TODO: check
+	- node-set-value <unfixed> (bug #994448)
+	NOTE: https://github.com/jonschlinkert/set-value/commit/7cf8073bb06bf0c15e08475f9f952823b4576452 (v4.0.1)
+	NOTE: https://github.com/jonschlinkert/set-value/pull/33/commits/383b72d47c74a55ae8b6e231da548f9280a4296a
+	NOTE: https://github.com/jonschlinkert/set-value/pull/33
 CVE-2021-23439 (This affects the package file-upload-with-preview before 4.2.0. A file ...)
 	NOT-FOR-US: Node file-upload-with-preview
 CVE-2021-23438 (This affects the package mpath before 0.8.4. A type confusion vulnerab ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/37fd4b89715c3a3f1d897bb55dde8d53bf506076

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/37fd4b89715c3a3f1d897bb55dde8d53bf506076
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210916/d3201cbd/attachment.htm>