[Git][security-tracker-team/security-tracker][master] Mark CVE-2024-1681/python-flask-cors as postponed for buster
Utkarsh Gupta (@utkarsh)
utkarsh at debian.org
Mon May 20 02:17:47 BST 2024
Utkarsh Gupta pushed to branch master at Debian Security Tracker / security-tracker
Commits:
bbf92348 by Utkarsh Gupta at 2024-05-20T06:47:22+05:30
Mark CVE-2024-1681/python-flask-cors as postponed for buster
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -10544,6 +10544,7 @@ CVE-2024-21846 (An unauthenticated attacker can reset the board and stop transmi
NOT-FOR-US: Electrolink
CVE-2024-1681 (corydolphin/flask-cors is vulnerable to log injection when the log lev ...)
- python-flask-cors 4.0.1-1 (bug #1069764)
+ [buster] - python-flask-cors <postponed> (Minor issue)
NOTE: https://huntr.com/bounties/25a7a0ba-9fa2-4777-acb6-03e5539bb644
NOTE: https://github.com/corydolphin/flask-cors/issues/349
NOTE: Fixed by: https://github.com/corydolphin/flask-cors/commit/6172c2000dba965fedb8e9a8a916ad56f0fb2630 (4.0.1)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bbf923486b263cba6220df573f9819fafea83d47
--
This project does not include diff previews in email notifications.
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bbf923486b263cba6220df573f9819fafea83d47
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240520/842e1e0c/attachment.htm>
More information about the debian-security-tracker-commits
mailing list