[Git][security-tracker-team/security-tracker][master] new markdown-it-py issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
65c81531 by Moritz Muehlenhoff at 2023-02-28T11:16:44+01:00
new markdown-it-py issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2361,9 +2361,15 @@ CVE-2023-26305
 CVE-2023-26304
 	RESERVED
 CVE-2023-26303 (Denial of service could be caused to markdown-it-py, before v2.2.0, if ...)
-	TODO: check
+	- markdown-it-py <unfixed>
+	NOTE: https://github.com/advisories/GHSA-vrjv-mxr7-vjf8
+	NOTE: https://github.com/executablebooks/markdown-it-py/pull/246
+	NOTE: https://github.com/executablebooks/markdown-it-py/commit/ae03c6107dfa18e648f6fdd1280f5b89092d5d49
 CVE-2023-26302 (Denial of service could be caused to the command line interface of mar ...)
-	TODO: check
+	- markdown-it-py <unfixed>
+	NOTE: https://github.com/advisories/GHSA-jrwr-5x3p-hvc3
+	NOTE: https://github.com/executablebooks/markdown-it-py/pull/247
+	NOTE: https://github.com/executablebooks/markdown-it-py/commit/53ca3e9c2b9e9b295f6abf7f4ad2730a9b70f68c
 CVE-2023-26301
 	RESERVED
 CVE-2023-26300



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/65c8153183d3c3a86540429866652a9e76d78807

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/65c8153183d3c3a86540429866652a9e76d78807
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230228/f12b02be/attachment.htm>