[Git][security-tracker-team/security-tracker][master] CVE-2021-42581/node-ramda disputed upstream

[Neil Williams (@codehelp)]

Neil Williams pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6e1e92af by Neil Williams at 2022-05-11T11:28:09+01:00
CVE-2021-42581/node-ramda disputed upstream

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -38324,7 +38324,11 @@ CVE-2021-42583 (A Broken or Risky Cryptographic Algorithm exists in Max Mazurov
 CVE-2021-42582
 	RESERVED
 CVE-2021-42581 (Prototype poisoning in function mapObjIndexed in Ramda 0.27.0 and earl ...)
-	TODO: check
+	- node-ramda <not-affected> (disputed)
+	NOTE: https://github.com/ramda/ramda/pull/3192
+	NOTE: https://jsfiddle.net/3pomzw5g/2/
+	NOTE: http://link.fourwindssoft.com/52
+	NOTE: http://link.fourwindssoft.com/53
 CVE-2021-42580 (Sourcecodester Online Learning System 2.0 is vunlerable to sql injecti ...)
 	NOT-FOR-US: Sourcecodester
 CVE-2021-42579



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6e1e92afb666d3b0f4249e9cb0c407c8208c9dd1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6e1e92afb666d3b0f4249e9cb0c407c8208c9dd1
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220511/33f53301/attachment.htm>