[Git][security-tracker-team/security-tracker][master] new erlang-jose issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d410b254 by Moritz Muehlenhoff at 2024-03-21T18:36:06+01:00
new erlang-jose issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -607,7 +607,9 @@ CVE-2023-6597 (An issue was found in the CPython `tempfile.TemporaryDirectory` c
 	NOTE: https://github.com/python/cpython/commit/d54e22a669ae6e987199bb5d2c69bb5a46b0083b (v3.9.19)
 	NOTE: https://mail.python.org/archives/list/security-announce@python.org/thread/Q5C6ATFC67K53XFV4KE45325S7NS62LD/
 CVE-2023-50966 (erlang-jose (aka JOSE for Erlang and Elixir) through 1.11.6 allow atta ...)
-	TODO: check
+	- erlang-jose <unfixed>
+	NOTE: https://github.com/potatosalad/erlang-jose/issues/156
+	NOTE: https://github.com/P3ngu1nW/CVE_Request/blob/main/erlang-jose.md
 CVE-2023-4426
 	REJECTED
 CVE-2023-44092 (Improper Neutralization of Special Elements used in an OS Command ('OS ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d410b25482da3f51dce5110bc78bdc766f7ec0d0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d410b25482da3f51dce5110bc78bdc766f7ec0d0
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240321/fe52cdbc/attachment.htm>