[Git][security-tracker-team/security-tracker][master] Reference merge commit for CVE-2023-28154

Salvatore Bonaccorso (@carnil) carnil at debian.org
Mon Mar 13 19:20:30 GMT 2023



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5fc7df1c by Salvatore Bonaccorso at 2023-03-13T20:19:52+01:00
Reference merge commit for CVE-2023-28154

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -9,6 +9,7 @@ CVE-2023-28155
 CVE-2023-28154 (Webpack 5 before 5.76.0 does not avoid cross-realm object access. Impo ...)
 	- node-webpack <unfixed>
 	NOTE: https://github.com/webpack/webpack/pull/16500
+	NOTE: Merge commit: https://github.com/webpack/webpack/commit/4b4ca3bb53f36a5b8fc6bc1bd976ed7af161bd80 (v5.76.0)
 CVE-2023-1363 (A vulnerability, which was classified as problematic, was found in Sou ...)
 	NOT-FOR-US: SourceCodester Computer Parts Sales and Inventory System
 CVE-2023-1362 (Improper Restriction of Rendered UI Layers or Frames in GitHub reposit ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5fc7df1ca7ede84e5a0c969a0e09ce51651bcfe7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5fc7df1ca7ede84e5a0c969a0e09ce51651bcfe7
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230313/5f7a45ab/attachment.htm>


More information about the debian-security-tracker-commits mailing list