[Git][security-tracker-team/security-tracker][master] CVE-2022-21668/pipenv <not-affected> Vulnerable code not uploaded

[Neil Williams (@codehelp)]

Neil Williams pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a2d75e4f by Neil Williams at 2022-02-03T14:01:14+00:00
CVE-2022-21668/pipenv <not-affected> Vulnerable code not uploaded

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -14490,7 +14490,9 @@ CVE-2022-21670 (markdown-it is a Markdown parser. Prior to version 1.3.2, specia
 CVE-2022-21669 (PuddingBot is a group management bot. In version 0.0.6-b933652 and pri ...)
 	NOT-FOR-US: PuddingBot
 CVE-2022-21668 (pipenv is a Python development workflow tool. Starting with version 20 ...)
-	TODO: check
+	- pipenv <not-affected> (Vulnerable code not uploaded)
+	NOTE: https://github.com/pypa/pipenv/releases/tag/v2022.1.8
+	NOTE: https://github.com/pypa/pipenv/pull/4899 (v2022.1.8)
 CVE-2022-21667 (soketi is an open-source WebSockets server. There is an unhandled case ...)
 	NOT-FOR-US: soketi
 CVE-2022-21666 (Useful Simple Open-Source CMS (USOC) is a content management system (C ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a2d75e4f1425bf7f06f6d92e7e18c1a88ee0bf4f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a2d75e4f1425bf7f06f6d92e7e18c1a88ee0bf4f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220203/71efac8f/attachment.htm>