[Git][security-tracker-team/security-tracker][master] Add CVE-2022-36033/jsoup

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d94fc96a by Salvatore Bonaccorso at 2022-09-02T08:40:45+02:00
Add CVE-2022-36033/jsoup

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -8363,7 +8363,9 @@ CVE-2022-36035 (Flux is a tool for keeping Kubernetes clusters in sync with sour
 CVE-2022-36034 (nitrado.js is a type safe wrapper for the Nitrado API. Possible ReDoS  ...)
 	TODO: check
 CVE-2022-36033 (jsoup is a Java HTML parser, built for HTML editing, cleaning, scrapin ...)
-	TODO: check
+	- jsoup <unfixed>
+	NOTE: https://github.com/jhy/jsoup/security/advisories/GHSA-gp7f-rwcx-9369
+	NOTE: https://github.com/jhy/jsoup/commit/4ea768d96b3d232e63edef9594766d44597b3882 (jsoup-1.15.3)
 CVE-2022-36032
 	RESERVED
 CVE-2022-36031 (Directus is a free and open-source data platform for headless content  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d94fc96a0b3bca39857f4e8c157352ce3261d5f8

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d94fc96a0b3bca39857f4e8c157352ce3261d5f8
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220902/6dd88ac5/attachment.htm>