[Git][security-tracker-team/security-tracker][master] CVE-2022-25896/passportjs unfixed bug 1014385

[Neil Williams (@codehelp)]

Neil Williams pushed to branch master at Debian Security Tracker / security-tracker


Commits:
47810606 by Neil Williams at 2022-07-05T10:01:12+01:00
CVE-2022-25896/passportjs unfixed bug 1014385

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -25685,7 +25685,10 @@ CVE-2022-25898 (The package jsrsasign before 10.5.25 are vulnerable to Improper
 CVE-2022-25897
 	RESERVED
 CVE-2022-25896 (This affects the package passport before 0.6.0. When a user logs in or ...)
-	TODO: check
+	- passportjs <unfixed> (bug #1014385)
+	NOTE: https://github.com/jaredhanson/passport/commit/42630cbd1ffd44d146ff96f0a4be6f3c12f81d75 (v0.6.0)
+	NOTE: https://github.com/jaredhanson/passport/pull/900
+	NOTE: https://snyk.io/vuln/SNYK-JS-PASSPORT-2840631
 CVE-2022-25895
 	RESERVED
 CVE-2022-25894



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4781060661bdf94adecc0634487cfaccf939bb63

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4781060661bdf94adecc0634487cfaccf939bb63
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220705/84dcbb02/attachment.htm>