[Git][security-tracker-team/security-tracker][master] Add another required commit for CVE-2022-25901/node-cookiejar.

Chris Lamb (@lamby) lamby at debian.org
Mon Sep 11 20:42:59 BST 2023



Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7a66ac39 by Chris Lamb at 2023-09-11T12:42:41-07:00
Add another required commit for CVE-2022-25901/node-cookiejar.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -111144,6 +111144,7 @@ CVE-2022-25901 (Versions of the package cookiejar before 2.1.4 are vulnerable to
 	NOTE: https://github.com/bmeck/node-cookiejar/pull/39
 	NOTE: https://github.com/bmeck/node-cookiejar/commit/a9a320c3c49d65df491f5721969cfbf9e128d9af
 	NOTE: https://github.com/bmeck/node-cookiejar/commit/eaa00021caf6ae09449dde826108153b578348e5
+	NOTE: https://github.com/bmeck/node-cookiejar/commit/ccb012da6dcfd58aaed792824f83d7227df8dea1
 CVE-2022-25900 (All versions of package git-clone are vulnerable to Command Injection  ...)
 	NOT-FOR-US: Node git-clone
 CVE-2022-25898 (The package jsrsasign before 10.5.25 are vulnerable to Improper Verifi ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7a66ac39ec265de7d3f4236e012fb0c695e0c458

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7a66ac39ec265de7d3f4236e012fb0c695e0c458
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230911/c795430e/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list