[Git][security-tracker-team/security-tracker][master] Add CVE-2022-3517/node-minimatch

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
86a60ca1 by Salvatore Bonaccorso at 2022-10-19T08:54:07+02:00
Add CVE-2022-3517/node-minimatch

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1178,7 +1178,9 @@ CVE-2022-42921
 CVE-2022-42920
 	RESERVED
 CVE-2022-3517 (A vulnerability was found in the minimatch package. This flaw allows a ...)
-	TODO: check
+	- node-minimatch 3.0.5+~3.0.5-1
+	NOTE: https://github.com/grafana/grafana-image-renderer/issues/329
+	NOTE: https://github.com/isaacs/minimatch/commit/a8763f4388e51956be62dc6025cec1126beeb5e6 (v3.0.5)
 CVE-2022-3516
 	RESERVED
 CVE-2022-3515



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/86a60ca1624697913db2d601f1049201831a4f33

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/86a60ca1624697913db2d601f1049201831a4f33
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20221019/ba9a68f8/attachment-0001.htm>