[Git][security-tracker-team/security-tracker][master] CVE-2022-21708/golang-github-graph-gophers-graphql-go fixed in unstable

Neil Williams (@codehelp) codehelp at debian.org
Thu Feb 3 14:42:10 GMT 2022



Neil Williams pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7a1c667c by Neil Williams at 2022-02-03T14:41:40+00:00
CVE-2022-21708/golang-github-graph-gophers-graphql-go fixed in unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -14388,7 +14388,10 @@ CVE-2022-21710 (ShortDescription is a MediaWiki extension that provides local sh
 CVE-2022-21709
 	RESERVED
 CVE-2022-21708 (graphql-go is a GraphQL server with a focus on ease of use. In version ...)
-	TODO: check
+	- golang-github-graph-gophers-graphql-go 1.3.0-1
+	NOTE: https://github.com/graph-gophers/graphql-go/commit/eae31ca73eb3473c544710955d1dbebc22605bfe (v1.3.0)
+	NOTE: https://github.com/graph-gophers/graphql-go/security/advisories/GHSA-mh3m-8c74-74xh
+	NOTE: https://github.com/graph-gophers/graphql-go/pull/492
 CVE-2022-21707 (wasmCloud Host Runtime is a server process that securely hosts and pro ...)
 	NOT-FOR-US: wasmCloud Host Runtime
 CVE-2022-21706



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7a1c667c25cde511ec3d6cb871e719ce68da7726

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7a1c667c25cde511ec3d6cb871e719ce68da7726
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220203/3d55f3f4/attachment.htm>


More information about the debian-security-tracker-commits mailing list