[Git][security-tracker-team/security-tracker][master] Add CVE-2022-36083/node-jose
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Mon Sep 12 20:21:33 BST 2022
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
253fc075 by Salvatore Bonaccorso at 2022-09-12T21:21:04+02:00
Add CVE-2022-36083/node-jose
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -11256,7 +11256,9 @@ CVE-2022-36085 (Open Policy Agent (OPA) is an open source, general-purpose polic
CVE-2022-36084 (cruddl is software for creating a GraphQL API for a database, using th ...)
NOT-FOR-US: cruddl
CVE-2022-36083 (JOSE is "JSON Web Almost Everything" - JWA, JWS, JWE, JWT, JWK, JWKS w ...)
- TODO: check
+ - node-jose 4.9.2-1
+ NOTE: https://github.com/panva/jose/security/advisories/GHSA-jv3g-j58f-9mq9
+ NOTE: https://github.com/panva/jose/commit/03d6d013bf6e070e85adfe5731f526978e3e8e4d (v4.9.2)
CVE-2022-36082 (mangadex-downloader is a command-line tool to download manga from Mang ...)
NOT-FOR-US: mangadex-downloader
CVE-2022-36081 (Wikmd is a file based wiki that uses markdown. Prior to version 1.7.1, ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/253fc0759a04aa0cb608c33b1efd8e86a2a14cde
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/253fc0759a04aa0cb608c33b1efd8e86a2a14cde
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220912/ba510860/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list