[Git][security-tracker-team/security-tracker][master] "new" djangorestframework issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
830e0282 by Moritz Muehlenhoff at 2022-07-22T13:38:49+02:00
"new" djangorestframework issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,6 @@
+CVE-2019-XXXX [djangorestframework XSS]
+	- djangorestframework 3.10.2-1
+	NOTE: https://github.com/encode/django-rest-framework/commit/4bb9a3c48427867ef1e46f7dee945a4c25a4f9b8 (3.9.1)
 CVE-2022-36372
 	RESERVED
 CVE-2022-36367
@@ -130728,7 +130731,6 @@ CVE-2020-25627 (The moodlenetprofile user profile field required extra sanitizin
 	- moodle <removed>
 CVE-2020-25626 (A flaw was found in Django REST Framework versions before 3.12.0 and b ...)
 	- djangorestframework 3.12.1-1 (bug #971554)
-	[buster] - djangorestframework <no-dsa> (Minor issue)
 	[stretch] - djangorestframework <no-dsa> (Minor issue)
 	NOTE: https://github.com/encode/django-rest-framework/commit/ae649336b110afe21b9429f2554052f31a9dfaf9
 	NOTE: Fixed upstream in 3.12.0 and 3.11.2



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/830e028251e96189bfc2dddb758e932c8b375311

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/830e028251e96189bfc2dddb758e932c8b375311
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220722/b9e2a474/attachment.htm>