[Git][security-tracker-team/security-tracker][master] Add CVE-2022-36083/node-jose

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
253fc075 by Salvatore Bonaccorso at 2022-09-12T21:21:04+02:00
Add CVE-2022-36083/node-jose

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -11256,7 +11256,9 @@ CVE-2022-36085 (Open Policy Agent (OPA) is an open source, general-purpose polic
 CVE-2022-36084 (cruddl is software for creating a GraphQL API for a database, using th ...)
 	NOT-FOR-US: cruddl
 CVE-2022-36083 (JOSE is "JSON Web Almost Everything" - JWA, JWS, JWE, JWT, JWK, JWKS w ...)
-	TODO: check
+	- node-jose 4.9.2-1
+	NOTE: https://github.com/panva/jose/security/advisories/GHSA-jv3g-j58f-9mq9
+	NOTE: https://github.com/panva/jose/commit/03d6d013bf6e070e85adfe5731f526978e3e8e4d (v4.9.2)
 CVE-2022-36082 (mangadex-downloader is a command-line tool to download manga from Mang ...)
 	NOT-FOR-US: mangadex-downloader
 CVE-2022-36081 (Wikmd is a file based wiki that uses markdown. Prior to version 1.7.1, ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/253fc0759a04aa0cb608c33b1efd8e86a2a14cde

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/253fc0759a04aa0cb608c33b1efd8e86a2a14cde
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220912/ba510860/attachment-0001.htm>