[Git][security-tracker-team/security-tracker][master] Add CVE-2021-4453{1,2,3,4}/nodejs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b135543f by Salvatore Bonaccorso at 2022-01-11T06:55:10+01:00
Add CVE-2021-4453{1,2,3,4}/nodejs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -7299,14 +7299,26 @@ CVE-2021-44536
 	RESERVED
 CVE-2021-44535
 	RESERVED
-CVE-2021-44534
+CVE-2021-44534 [Prototype pollution via console.table properties]
 	RESERVED
-CVE-2021-44533
+	- nodejs <unfixed>
+	NOTE: https://nodejs.org/en/blog/vulnerability/jan-2022-security-releases/#prototype-pollution-via-console-table-properties-low-cve-2022-21824
+	TODO: check details
+CVE-2021-44533 [Incorrect handling of certificate subject and issuer fields]
 	RESERVED
-CVE-2021-44532
+	- nodejs <unfixed>
+	NOTE: https://nodejs.org/en/blog/vulnerability/jan-2022-security-releases/#incorrect-handling-of-certificate-subject-and-issuer-fields-medium-cve-2021-44533
+	TODO: check details
+CVE-2021-44532 [Certificate Verification Bypass via String Injection]
 	RESERVED
-CVE-2021-44531
+	- nodejs <unfixed>
+	NOTE: https://nodejs.org/en/blog/vulnerability/jan-2022-security-releases/#certificate-verification-bypass-via-string-injection-medium-cve-2021-44532
+	TODO: check details
+CVE-2021-44531 [Improper handling of URI Subject Alternative Names]
 	RESERVED
+	- nodejs <unfixed>
+	NOTE: https://nodejs.org/en/blog/vulnerability/jan-2022-security-releases/#improper-handling-of-uri-subject-alternative-names-medium-cve-2021-44531
+	TODO: check details
 CVE-2021-44530
 	RESERVED
 CVE-2021-44529 (A code injection vulnerability in the Ivanti EPM Cloud Services Applia ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b135543fbdaa77b095c17b57a693bb76fcec8e98

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b135543fbdaa77b095c17b57a693bb76fcec8e98
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220111/34b1ea5f/attachment.htm>