[Git][security-tracker-team/security-tracker][master] new node-browserify-sign issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
259494d9 by Moritz Muehlenhoff at 2023-10-27T17:16:02+02:00
new node-browserify-sign issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -161,7 +161,9 @@ CVE-2023-46435 (Sourcecodester Packers and Movers Management System v1.0 is vuln
 CVE-2023-46238 (ZITADEL is an identity infrastructure management system. ZITADEL users ...)
 	NOT-FOR-US: ZITADEL
 CVE-2023-46234 (browserify-sign is a package to duplicate the functionality of node's  ...)
-	TODO: check
+	- node-browserify-sign <unfixed>
+	NOTE: https://github.com/browserify/browserify-sign/security/advisories/GHSA-x9w5-v3q2-3rhw
+	NOTE: https://github.com/browserify/browserify-sign/commit/85994cd6348b50f2fd1b73c54e20881416f44a30
 CVE-2023-46094 (Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Conversi ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2023-46090 (Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WebDorad ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/259494d925badb35c1a4e1292a6f08d4e8dacb31

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/259494d925badb35c1a4e1292a6f08d4e8dacb31
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20231027/55cc562f/attachment.htm>